Estonian FIU flags rapid gambling withdrawals in new typology report

Estonia’s Financial Intelligence Unit (FIU) asks obliged entities to identify gambling transactions matching its new cash-in, cash-out typology and use reference 10TT202607 when reporting related suspicionsFIU. The pattern involves deposits followed by little or no gambling, or low-risk betting, and withdrawal shortly afterwardsFIU. The apparent payout from a gambling operator can then be presented as winnings, concealing the funds’ true origin.

The FIU says it has encountered suspicious cases in Estonian gambling operators’ systems. Its report covers both physical and online casinos and payments through bank transfers, cards, cash and virtual assets. Multiple payment methods and transactions structured by connected people can complicate the pattern; online accounts may also use fraudulent identity information.

The examples show why monitoring should connect deposits, play and payouts. They include cash deposited and then withdrawn to a bank account after minimal gambling, and cash combined with a bank-transfer deposit before a bank withdrawal. Other cases involve virtual assets deposited without gambling and withdrawn to a bank account, or card deposits withdrawn without gambling to a private virtual-asset address and subsequently transferred to an exchange.

The report describes closed-loop payments as a risk-mitigation method: withdrawals use the same payment method as the deposit. It contrasts this with open-loop arrangements, such as a cash deposit followed by a bank-account withdrawal, which it describes as significantly more vulnerable to money laundering.

Indicators extend beyond short holding periods and low-risk bets. The FIU lists smaller structured deposits, test payments before larger deposits, missing due-diligence documents, suspected proxies and forged or borrowed identity documents. Connected customers may share an IP address, send virtual-asset withdrawals to the same destination or receive deposits from the same address. Chargeback or fraud information, adverse public information and transactions inconsistent with declared income are also relevant.

These indicators require context. Customers can legitimately use several cards, and promotions can affect deposit size and frequency. A customer who finds no suitable bet may reasonably withdraw a deposit without playing if there are no other risk indicatorsFIU. Repeated patterns merit closer scrutiny, assessed together with other information; a single indicator does not necessarily establish money laundering, terrorist financing or sanctions evasionFIU.

The FIU asks obliged entities to assess the customer’s behaviour as a whole and consider enhanced due diligence where appropriate. If suspicions remain after those measures, they should submit a report and enter 10TT202607 in the transaction-description fieldFIU. The guidance is set out in Typology Report 10TT202607, “Deposits and Withdrawals to Gambling Operators”FIU.