PCC20 has put the industry on notice, but a lot of betting accounts still behave as if FICA is a problem for payday, not for signup. The Financial Intelligence Centre’s line is simple enough: if an operator is taking money into an online betting account, customer identification and verification should already be done. The market has built a messier version of that rule. A player can deposit, place bets, and only hit the real document wall when the first withdrawal is requested.
That gap is where the trouble starts. A name mismatch on an ID, an expired proof of address, a shared bank account, or a cellphone number that does not line up with the account can sit unnoticed through the deposit and betting stages. Then a win lands, the player asks for a payout, and the operator starts asking for the paperwork it should already have been ready to demand.
PCC20 sets the timing earlier than most players expect
PCC20 is not subtle about the sequence. For accountable institutions, including bookmakers and totalisators, identification and verification must be finished before the business relationship starts or a single transaction is concluded. In an online betting context, that means before the operator accepts funds into the account.
The guidance also tightens the screws on non face to face onboarding. An online check has to give the operator confidence comparable to what it would get from seeing the customer in person. This does not mean every account needs a pile of uploads at the door. It means the operator cannot treat first deposit first, verification later as a harmless convenience.
The practical problem is that the market often talks about FICA as if there is one checkpoint. There are usually several. Identity can be screened electronically at registration, bank details can be checked against the name on the profile, and phone numbers can be confirmed through OTPs or RICA linked validation. Weeks later, proof of address or a clearer document scan gets requested when money has to leave the platform.
The common pattern is electronic first, documents later
A no upload registration flow does not automatically mean no verification happened. In a lot of cases the operator has already run the ID number, name, date of birth, and contact details through a database check in the background. Home Affairs matching, credit bureau cross checks, bank account verification, and third party identity tools such as ThisIsMe or LexisNexis are all part of the toolkit. They can give an operator enough comfort to let the account function while still reserving the right to ask for documents later.
This is where consumer frustration comes from. The customer sees a working account and assumes the compliance box has been ticked. The operator sees a risk tier that is still open. These are not the same thing.
Hollywoodbets
Hollywoodbets sits close to the market norm. Registration typically asks for a full name, ID number, date of birth, phone number, and address. Initial electronic checks can happen before the account is fully active, which means a player may deposit and bet without uploading documents straight away.
The first withdrawal is usually where the sharper document requests arrive. A copy of the ID and proof of address, usually not older than three months, gets pulled into the process if the earlier checks were not enough to close the loop.
Betway South Africa
Betway South Africa follows a similar structure. The registration layer collects the obvious identity fields and often runs an automated match against national data sources. Deposits and wagering can proceed once those early checks pass.
The pressure point is the first payout. At that stage, the account can be asked for FICA documents, including ID and proof of residence, before the withdrawal is processed.
Supabets
Supabets gives the player a slightly more graduated experience. Basic registration goes in first, then the account may be allowed to take deposits and bets while the operator waits for deeper verification. In some cases, betting limits or withdrawal rights are held back until the customer completes the document side of the process.
If the player reaches a withdrawal before closing that loop, the operator can require a valid ID and proof of address before any winnings are released. Larger amounts tend to draw more attention, which is exactly how risk based compliance is supposed to work.
Gbets
Gbets is another example of the same broad model. Standard identity details are gathered up front, and the operator may run an automated check before letting the account move too far. Players can fund the account and bet, but the message around withdrawals is more direct. FICA comes first when money has to go out.
In practice, that means a bank statement or equivalent proof can be requested alongside ID and address documents, especially where the operator wants the bank account holder to match the verified customer exactly.
Players feel the pain at the worst possible time
A delayed mismatch is bad enough when it happens on a small payout. It is uglier when the player has already won properly and is waiting for a meaningful withdrawal. The delay can run for days or weeks while documents are submitted, checked, rejected, and resubmitted. In the worst cases, the account gets frozen, winnings are lost, or the customer walks away convinced the site was looking for a reason not to pay.
That perception is poison for a licensed operator. It drives support costs up, trust down, and complaints into public view. It also leaves the operator exposed to the FIC if its process can be read as accepting funds before verification is done. PCC20 gives the regulator a cleaner theory of the case than many operators would like to hear.
The fix is to move the friction earlier
The operators that handle this best do not hide the process. They front load the checks, say clearly what will be needed later, and make the customer understand that a working betting account is not the same thing as a ready withdrawal profile. Progressive FICA can work, but only if the player knows where the line is.
The industry problem is not that every account must be buried in paperwork on minute one. It is that too many players only discover the missing document when they want their money. By then, the account is no longer a betting account. It is a compliance queue with a balance attached.
Join the conversation