VerifyNow
Age-gated KYC for licensed SA iGaming operators.
Home Affairs SA ID verification (with 18+ age derivation), face match against the Home Affairs photograph, AML/PEP screening and AVS for withdrawals — the verification stack an NGB- or provincially-licensed operator needs to satisfy FICA Item 1A and keep minors off the platform.
In short: what VerifyNow does for a licensed SA iGaming operator
A defensible iGaming onboarding flow in South Africa combines Home Affairs SA ID verification (to enforce 18+ age gating and confirm the player’s identity), face match against the Home Affairs photograph, AML/PEP/sanctions screening under FICA Schedule 1 Item 1A, and bank account verification before any withdrawal. The operator remains the FICA accountable institution, runs its own RMCP, and files CTRs/STRs with the FIC.
VerifyNow’s scope: Home Affairs SA ID verification, face match / liveness, AML/PEP/sanctions screening (190+ countries), bank account verification (AVS), document authentication for international players, consumer trace and phone trace — all under POPIA-compliant consent with a full audit trail. VerifyNow does not run SAPS criminal record checks, does not provide credit bureau data and is not a national responsible-gambling self-exclusion registry; those are sourced separately from SAPS (or an authorised provider), a registered credit bureau, and the applicable provincial licensing / responsible-gambling body respectively.
What an iGaming RMCP actually runs
Six services combined into the player lifecycle — from account opening through withdrawal. Each is sourced by VerifyNow.
Home Affairs SA ID + Age Check
Verify ID + derive date of birth from Home Affairs. Enforce 18+ age gating at account opening.
Face Match & Liveness
Selfie-to-Home-Affairs-photo match. Stops minors using a parent's ID and binds the account to the physical player.
AML / PEP / Sanctions
PEP and sanctions screening (UN/OFAC/EU/UK/SA) for every player account. Required under FICA Item 1A.
Bank Account Verification (AVS)
Confirm the withdrawal account holder name and ID match the verified player identity before the first payout.
Document Authentication
Authenticate passport or foreign ID docs (OCR + tamper detection) for non-SA players.
Phone Trace
Resolve historical phone ownership on fraud investigations (bonus abuse, account-takeover disputes).
Sourced separately from VerifyNow
- • SAPS criminal clearances for licence-holder fit-and-proper: obtained from SAPS or an authorised provider.
- • National / provincial self-exclusion registers: queried against the responsible-gambling body — not a VerifyNow service.
- • Credit bureau data: obtained from a registered credit bureau if the operator elects to layer it (not a FICA requirement for iGaming CDD).
From sign-up to first payout
Six verification steps, chained into the player journey.
- 01
Registration + POPIA consent
Player signs up with SA ID, accepts POPIA consent including explicit 18+ declaration and AML screening disclosure.
- 02
Home Affairs ID verification + age gate
VerifyNow returns ID validity and DOB from Home Affairs. Anyone under 18 is rejected at this step.
- 03
Selfie + face match
Player captures a selfie. VerifyNow runs liveness and compares to the Home Affairs photograph to bind the account.
- 04
AML/PEP screening
Player identity is screened against PEP and sanctions lists. Hits route to the MLRO; clean results are recorded for the FIC file.
- 05
Withdrawal AVS
Before the first withdrawal, AVS confirms the nominated bank account is in the verified player's name.
- 06
Ongoing monitoring
Periodic AML re-screening per your RMCP cadence. Unusual activity feeds into STR filing with the FIC.
NGB, provincial licensing, FICA & POPIA
South African gambling is regulated by the National Gambling Board (NGB) at national level and by provincial gambling boards that issue the actual operating licences. Licensed operators — bookmakers, totalisators and casinos — are FICA accountable institutions under Schedule 1 Item 1A. That places them inside the standard FICA framework: RMCP (Section 42), CDD (Section 21), EDD (Section 21A), record-keeping (Sections 22–23) and reporting (Sections 28 and 29).
The National Gambling Act enforces the 18+ minimum age for all gambling activity. The Home Affairs SA ID number carries the date of birth in its first six digits (YYMMDD), so a successful Home Affairs verification lets the operator derive age with source-of-truth confidence. Binding the account to the physical player via face match blocks minors using an older family member’s ID. Responsible-gambling obligations (self-exclusion, problem-gambling measures) are handled through the relevant provincial body, not through VerifyNow.
Every check runs under POPIA-compliant consent. The operator remains the responsible party and the FICA accountable institution; VerifyNow provides the verification receipts your FIC inspections depend on.
iGaming questions
Are iGaming operators accountable institutions under FICA?
Yes. Casinos and other licensed gambling operators are accountable institutions under FICA Schedule 1 Item 1A. That means they must register with the FIC, run a Risk Management & Compliance Programme (RMCP) under Section 42, perform customer due diligence on players under Section 21, keep records under Sections 22–23, and submit cash-threshold (CTR) and suspicious transaction (STR) reports. VerifyNow supplies the CDD verification primitives — Home Affairs ID, face match, AML/PEP and AVS — that a licensed operator plugs into its RMCP.
How do I verify a player is 18 or older?
Age is encoded in the South African ID number itself (the first six digits are YYMMDD). VerifyNow's Home Affairs SA ID verification confirms the ID number is valid, returns the date of birth straight from Home Affairs, and surfaces the Home Affairs photograph. The operator derives age from DOB and blocks any account where the player is under 18. Combining this with face match against the Home Affairs photo prevents a minor using a parent's ID.
Does VerifyNow run credit checks, SAPS criminal record checks or problem-gambling history checks?
No. VerifyNow does not provide credit bureau reports or credit scores; it does not run SAPS criminal record clearances; and it is not a problem-gambling registry. For iGaming, VerifyNow's scope is Home Affairs SA ID verification (age and identity), face match / liveness (to bind the account to the physical player), AML/PEP/sanctions screening, bank account verification (for withdrawals), document authentication (passports for international players) and phone trace (fraud investigation). National responsible-gambling self-exclusion registers, SAPS criminal clearances, and credit bureau data are sourced separately from the relevant authority or provider.
Which AML/PEP lists are screened for SA iGaming?
VerifyNow's AML/PEP/sanctions screening covers domestic and foreign PEPs, UN, OFAC, EU, UK and South African sanctions lists across 190+ countries. Operators typically screen at account opening and re-screen periodically (daily or weekly, set by their RMCP). Hits are escalated to the MLRO for disposition; a negative or filtered hit still generates an auditable record for the operator's FIC file.
Why verify the withdrawal bank account?
Two reasons: AML (confirming the player is withdrawing to an account in their own name prevents third-party money laundering through a gambling account), and fraud (preventing an account takeover attacker from redirecting winnings to their own account). VerifyNow's Bank Account Verification (AVS) confirms account number, branch, account holder name and ID number match the verified identity on the player account before the first withdrawal is released.
How does VerifyNow handle POPIA for player onboarding?
All player verifications run under explicit POPIA-compliant consent. You choose whether to collect consent through your own front-end and pass the artefact into the VerifyNow API, or use VerifyNow's built-in consent collection flow. Only the data required for each specific check is processed, purpose-limited to your CDD and AML obligations, and the audit log ties every verification to a consent reference. You remain the responsible party under POPIA.
Keep minors out. Keep the FIC happy.
Home Affairs ID + age gate, face match, AML/PEP and AVS — in one dashboard and one API. Credits from R2.99 down to R1.94.