Your Withdrawal Is Under Security Review: What Is Actually Happening
Updated
Written and kept up to date by our own desk. We start at the cashier, we check the licence number against the regulator’s own register, and we print a figure only where the operator states it in terms we can read. How we check.
Under Gambling Commission rules, operators must establish and verify a player’s name, address, and date of birth before allowing any gambling to take place. When a payout is subsequently marked as under review, the status does not represent a single mechanical delay. It is an administrative pause where identity, anti-money laundering, bonus terms, account patterns, or safer-gambling checks can run in varying sequences.
The Gambling Commission addressed this in guidance on withdrawal expectations. A customer’s withdrawal request must not trigger a demand for additional verification if the licensee could reasonably have asked for that information earlier.
When a transaction stalls, knowing which procedural gate is active determines whether you wait or initiate a formal dispute.
Upfront Verification Rules and Late Information Requests
The initial gate is identity. Commission regulations require verification before any deposit is wagered, yet accounts frequently encounter document requests after requesting a cash-out.
The Commission has established clear limits on this practice. In guidance on fair and transparent terms last updated in 2026, the regulator stated that licensees cannot ask for verification information at the point of withdrawal if they could have obtained it sooner. A withdrawal request should not serve as an automatic prompt for basic identity paperwork.
``` Player Action Plan: When a Withdrawal Stalls
- Check Account Balance: Ensure deposit funds and bonus funds are displayed separately.
- Review Document History: Confirm whether requested ID details were accessible to the operator earlier.
- Submit Operator Complaint: File an official internal dispute if delays exceed reasonable operational holds.
- Note the Date: Track the calendar to mark the 8-week statutory ADR escalation window.
```
If identity verification fails entirely, the casino cannot simply confiscate the underlying balance. Operators must not remove funds held in a deposit balance when a customer cannot complete verification. The operator must hold those funds intact. Only after 12 months of failed verification is the business permitted to levy a reasonable periodic charge to maintain the account.
Active Bonuses and the Protection of Deposit Funds
A frequent source of review holds involves promotional play. Yet an active promotion does not grant an operator the right to freeze raw cash.
Commission rules on fair terms require operators to inform customers that they are allowed to withdraw their deposit balance at any point. This right remains in place even while a promotional bonus is pending or active on the account.
Deposit balances and promotional balances must remain structurally distinct. Licensees are prohibited from mixing deposit and bonus funds together or displaying them to the player as a single, combined pot of money.
If an operator claims a pending bonus prevents any payout of your original cash deposit, that practice directly contradicts Commission expectations. The deposit balance remains withdrawable regardless of the status of promotional wagering.
Processing Timetables and Evidentiary Limits
Players asking how long a casino withdrawal remains under review will find no universal statutory clock. No blanket timetable for security reviews is specified by the Gambling Commission.
Instead, review queues develop across multiple compliance departments. Identity verification, anti-money laundering reviews, play-pattern audits, and safer-gambling evaluations operate on different internal workflows.
The Commission’s published texts do not formalise exact operational criteria for specific triggers. The public regulatory framework does not establish explicit statutory rules linking payout delays to specific maximum-bet limits during bonus play. Nor does it define universal regulatory standards for linked-account flags, deposit-to-play ratios, or phone-call escalation procedures for safer-gambling checks.
While individual operators use these internal protocols, the regulator’s enforceable framework focuses on transparency, upfront identity validation, and the protection of deposited balances.
The Eight-Week Dispute Process and Alternative Resolution
When a review stops moving and internal support channels offer no timeline, the formal dispute framework becomes the primary mechanism for resolution.
The Gambling Commission requires every licensed gambling business to maintain an internal complaints procedure. If a dispute over a withheld payout is not resolved within eight weeks of receipt, the operator must provide access to an approved Alternative Dispute Resolution entity.
ADR providers offer an independent, free service to consumers. Under Commission rules:
- The player must exhaust the gambling business’s internal complaints procedure before filing with an ADR provider.
- Operators must tell customers precisely which ADR provider covers their dispute.
- Operators are restricted to using ADR entities that have been formally approved by the Commission.
- Contact details for the approved ADR provider must be published directly in the operator’s terms and conditions or service contract.
The eight-week clock begins when the initial complaint is logged with the operator. If payout reviews drag past reasonable internal timeframes without substantive explanation, logging a formal complaint in writing starts that statutory timeline toward free, independent arbitration.
How long the money takes once it has left the casino
These are the rails’ own published limits, not a promise from any operator. The casino’s internal review sits in front of all of them and is the part that actually varies.
- Trustly / open banking
- PayPal
- Debit card (Visa Direct / Mastercard Send)
- Bank transfer (Faster Payments)
- Trustly / open banking — Same banking day once the casino releases it
- PayPal — Usually the next banking day
- Debit card (Visa Direct / Mastercard Send) — Up to two banking days
- Bank transfer (Faster Payments) — Up to three banking days at the outside
Figures are the settlement windows published by the payment schemes themselves. We do not publish a per-casino payout time, because no operator in this list states one in terms we can check.