VerifyNowAge-gated KYC for licensed SA iGaming operators.
Use VerifyNow to confirm player age and identity, compare the player to the ID photo, screen AML/PEP risk and verify withdrawal accounts before activation or payout. Your operations team gets fast checks with report evidence for reviews.
In short: what VerifyNow does for a licensed SA iGaming operator
A defensible iGaming onboarding flow in South Africa combines Home Affairs SA ID verification (to enforce 18+ age gating and confirm the player’s identity), face match against the Home Affairs photograph, AML/PEP/sanctions screening under the operator’s RMCP, and bank account verification before any withdrawal. The operator remains the FICA accountable institution where applicable, runs its own RMCP, and files CTRs/STRs with the FIC.
VerifyNow’s scope: Home Affairs SA ID verification, face match / liveness, AML/PEP/sanctions screening (190+ countries), bank account verification (AVS), document authentication for international players, consumer trace and phone trace — all under POPIA-compliant consent with a full audit trail. VerifyNow does not run SAPS criminal record checks, does not provide credit bureau data and is not a national responsible-gambling self-exclusion registry; those are sourced separately from SAPS (or an authorised provider), a registered credit bureau, and the applicable provincial licensing / responsible-gambling body respectively.
What an iGaming RMCP actually runs
Six services combined into the player lifecycle — from account opening through withdrawal. Each is sourced by VerifyNow.
Home Affairs SA ID + Age Check
Verify ID + derive date of birth from Home Affairs. Enforce 18+ age gating at account opening.
Face Match & Liveness
Selfie-to-Home-Affairs-photo match. Stops minors using a parent's ID and binds the account to the physical player.
AML / PEP / Sanctions
PEP and sanctions screening (UN/OFAC/EU/UK/SA) for player-account risk controls.
Bank Account Verification (AVS)
Confirm the withdrawal account holder name and ID match the verified player identity before the first payout.
Document Authentication
Authenticate passport or foreign ID docs (OCR + tamper detection) for non-SA players.
Phone Trace
Resolve historical phone ownership on fraud investigations (bonus abuse, account-takeover disputes).
Sourced separately from VerifyNow
- • SAPS criminal clearances for licence-holder fit-and-proper: obtained from SAPS or an authorised provider.
- • National / provincial self-exclusion registers: queried against the responsible-gambling body — not a VerifyNow service.
- • Credit bureau data: obtained from a registered credit bureau if the operator elects to layer it (not a FICA requirement for iGaming CDD).
From sign-up to first payout
Six verification steps, chained into the player journey.
- 01
Registration + POPIA consent
Player signs up with SA ID, accepts POPIA consent including explicit 18+ declaration and AML screening disclosure.
- 02
Home Affairs ID verification + age gate
VerifyNow returns ID validity and DOB from Home Affairs. Anyone under 18 is rejected at this step.
- 03
Selfie + face match
Player captures a selfie. VerifyNow runs liveness and compares to the Home Affairs photograph to bind the account.
- 04
AML/PEP screening
Player identity is screened against PEP and sanctions lists. Hits route to the MLRO; clean results are recorded for the FIC file.
- 05
Withdrawal AVS
Before the first withdrawal, AVS confirms the nominated bank account is in the verified player's name.
- 06
Ongoing monitoring
Periodic AML re-screening per your RMCP cadence. Unusual activity feeds into STR filing with the FIC.
NGB, provincial licensing, FICA & POPIA
South African gambling is regulated by the National Gambling Board (NGB) at national level and by provincial gambling boards that issue the actual operating licences. Licensed gambling operators fall within FICA Schedule 1 supervision. That places them inside the standard FICA framework: RMCP, CDD, EDD, record-keeping and reporting.
The National Gambling Act enforces the 18+ minimum age for all gambling activity. The Home Affairs SA ID number carries the date of birth in its first six digits (YYMMDD), so a successful Home Affairs verification lets the operator derive age with source-of-truth confidence. Binding the account to the physical player via face match blocks minors using an older family member’s ID. Responsible-gambling obligations (self-exclusion, problem-gambling measures) are handled through the relevant provincial body, not through VerifyNow.
Every check runs under POPIA-compliant consent. The operator remains the responsible party and the FICA accountable institution; VerifyNow provides the verification receipts your FIC inspections depend on.
FICA workflow checklist for iGaming
Use this path for player onboarding, age checks, withdrawals, high-risk reviews and ongoing monitoring.
iGaming workflows need strong age, identity, AML, POPIA and withdrawal controls.
Practical onboarding sequence
- 1Confirm whether your business is a FICA accountable institution for this workflow.
- 2Identify the customer, counterparty or responsible person before the relationship starts.
- 3Verify identity using the right report and save the verification receipt.
- 4Risk-rate the person or entity and decide whether AML/PEP or enhanced due diligence is needed.
- 5Verify bank account ownership before deposits, payouts, refunds or settlements move.
- 6Keep a CDD record, consent/lawful-basis evidence, timestamp and transaction reference.
- 7Use the FICA Toolkit and RMCP generator where your business needs documented procedures.
Toolkit links
Home Affairs ID + Photo
Checks a South African ID number against Home Affairs and returns the official identity details and photo where available for your CDD file.
Run checkFace Match
Compares a selfie or face photo with an ID/reference photo, then returns a match result and confidence score to reduce impersonation risk.
Run checkAML/PEP/Sanctions
Searches sanctions, PEP, watchlist and adverse-risk sources so your team can review higher-risk people, directors and counterparties.
Run checkBank Account Verification
Checks the bank account details against bank-held data to confirm whether the account is open, valid and linked to the person or company provided.
Run checkDocument Authentication
Reviews an uploaded ID document, passport or licence image for document data, OCR and tamper signals where supported.
Run checkEducational guidance only. Your accountable-institution status, RMCP, customer risk rating and lawful basis determine the final checks and records you must keep.
iGaming questions
Are iGaming operators accountable institutions under FICA?
Yes. The gambling sector is supervised under FICA Schedule 1. Licensed gambling operators must register with the FIC where applicable, run a Risk Management & Compliance Programme (RMCP), perform customer due diligence on players, keep records and submit cash-threshold or suspicious transaction reports where required. VerifyNow supplies the CDD verification primitives — Home Affairs ID, face match, AML/PEP and AVS — that a licensed operator plugs into its RMCP.
How do I verify a player is 18 or older?
Age is encoded in the South African ID number itself (the first six digits are YYMMDD). VerifyNow's Home Affairs SA ID verification confirms the ID number is valid, returns the date of birth straight from Home Affairs, and surfaces the Home Affairs photograph. The operator derives age from DOB and blocks any account where the player is under 18. Combining this with face match against the Home Affairs photo prevents a minor using a parent's ID.
Does VerifyNow run credit checks, SAPS criminal record checks or problem-gambling history checks?
No. VerifyNow does not provide credit bureau reports or credit scores; it does not run SAPS criminal record clearances; and it is not a problem-gambling registry. For iGaming, VerifyNow's scope is Home Affairs SA ID verification (age and identity), face match / liveness (to bind the account to the physical player), AML/PEP/sanctions screening, bank account verification (for withdrawals), document authentication (passports for international players) and phone trace (fraud investigation). National responsible-gambling self-exclusion registers, SAPS criminal clearances, and credit bureau data are sourced separately from the relevant authority or provider.
Which AML/PEP lists are screened for SA iGaming?
VerifyNow's AML/PEP/sanctions screening covers domestic and foreign PEPs, UN, OFAC, EU, UK and South African sanctions lists across 190+ countries. Operators typically screen at account opening and re-screen periodically (daily or weekly, set by their RMCP). Hits are escalated to the MLRO for disposition; a negative or filtered hit still generates an auditable record for the operator's FIC file.
Why verify the withdrawal bank account?
Two reasons: AML (confirming the player is withdrawing to an account in their own name prevents third-party money laundering through a gambling account), and fraud (preventing an account takeover attacker from redirecting winnings to their own account). VerifyNow's Bank Account Verification (AVS) confirms account number, branch, account holder name and ID number match the verified identity on the player account before the first withdrawal is released.
How does VerifyNow handle POPIA for player onboarding?
All player verifications run under explicit POPIA-compliant consent. You choose whether to collect consent through your own front-end and pass the artefact into the VerifyNow API, or use VerifyNow's built-in consent collection flow. Only the data required for each specific check is processed, purpose-limited to your CDD and AML obligations, and the audit log ties every verification to a consent reference. You remain the responsible party under POPIA.
Keep minors out. Keep the FIC happy.
Home Affairs ID + age gate, face match, AML/PEP and AVS — in one dashboard and one API. Credits from R2.99 down to R1.94.