KYC specialist: the easiest way into iGaming compliance

Every casino operator has a queue that never ends: new players sign up, request withdrawals, and before the money leaves, someone has to look at a passport, a utility bill and a bank statement and decide whether this person is who they claim to be. That someone is the KYC specialist. It is a high-volume role, dull-looking on the surface, and yet one of the few ways into industry compliance without a single day of gambling experience. Here is what a KYC analyst actually does, what it pays and where the job leads in a year or two.

What a KYC specialist does

KYC stands for know your customer. In practice it's not a one-off check at sign-up but an ongoing process that follows the player through their entire journey on the platform:

• Identity and address verification. A passport or ID card, a utility bill or bank statement no older than 3 months — the standard document package, checked for authenticity and for a match against the profile data.
• SoF/SoW checks. Source of Funds (where the money for a specific deposit came from) and Source of Wealth (where the income overall came from) — these are requested from players with large sums or an atypical play pattern. This is no longer just "reading a passport," but going through bank statements, income certificates, sometimes property sale agreements.
• EDD — Enhanced Due Diligence. Enhanced due diligence for players in higher-risk categories: high limits, PEP status (politically exposed person), a country under sanctions. The KYC analyst compiles the package and hands it to the AML officer, but it's the analyst who decides the case needs that level of attention in the first place.
• List screening. Checking player data against sanctions lists and PEP lists via providers like Comply Advantage — a routine but licence-mandated operation.
• Spotting forgeries and multi-accounts. Photoshopped documents, one person with five profiles under different names — the eye trains fast, but a mistake costs a genuine player a blocked withdrawal or lets a fraudster slip through.
• Escalation. Anything suspicious isn't the KYC specialist's call to make alone. The case goes to the AML officer with a written note: what's off, which documents are attached, what the risk is.

It's worth understanding the boundary: KYC is identity and document verification, AML is transaction monitoring and investigating laundering schemes. EDD formally falls under the AML remit, but it's the KYC analyst who prepares the material for it and is first to see the red flags.

A real-world example: a player deposits €50–100 at a time over a month, then suddenly deposits €15,000 in one go and immediately requests a large withdrawal. On paper the documents are fine — the passport is genuine, the address matches. But the sharp jump in amount and the pattern of play (minimum stakes straight after the deposit) are a classic reason to request SoF: proof of income, bank statements for recent months or a property sale agreement. If the player cannot give a coherent explanation of the source, the case goes to EDD and on to the AML officer. It is borderline decisions like these, not mechanically matching a photo to a passport, that separate an experienced KYC specialist from a beginner.

A typical working day

The schedule is usually shift-based — the verification queue never stops, and new accounts get registered 24/7. That's inconvenient at first, but the shift work is actually what makes it easier to break in: night and weekend shifts are more willing to take people with no experience.

Tools and skills

Technically the profession doesn't require a law or finance degree — it needs diligence and attention to detail more than formal education:

• KYC providers. SumSub, Jumio, Onfido — platforms that automatically match a document photo against the player's selfie and flag obvious mismatches, but the final call is almost always a human's.
• Screening systems. Comply Advantage and similar tools — for checking against sanctions and PEP lists.
• The platform's internal back office, where the history of deposits, withdrawals, and previous player checks is visible.
• Signs of document forgery — this is taught during onboarding, but a trained eye for detail is valued here more than any course.
• English from B1–B2. Internal correspondence and procedures are usually in English, but the players' own documents can be in any market language — knowing a second language speeds up your career.

Personal qualities matter as much as the tools: a calm attitude to routine (the same procedure hundreds of times per shift), resilience when declining players, who are almost always unhappy, and the discipline not to miss a detail on the hundredth identical case in a row. Automation from providers like SumSub takes over some of the mechanical work — checking fonts, holograms and the passport's MRZ code — but the final «approve» or «decline» is almost always signed off by a human, and that responsibility is what you are paid for.

Why KYC jobs are always open

Demand for verification staff doesn't track the market cycle the way demand for marketers or developers does. The reasons are structural:

• The licence requires the function, not the desire. MGA, UKGC, the new-format Curaçao licence — all of them require a working KYC procedure before launch, not "sometime later."
• New markets mean a new stream of sign-ups. Every operator entering another jurisdiction hires verification staff for a specific language and the local document format.
• Turnover is above average. The work is routine and shift-based, so juniors regularly move up or into other departments — the vacancies open up again.
• Regulatory pressure is rising, not falling. Fines for a missed suspicious case run into the tens and hundreds of thousands of euros, so operators keep their KYC team staffed with a buffer, not right at the edge.

How much it pays by level

Ranges are shown in euros, take-home per month, excluding the bonus component. The figures are drawn from industry job postings and offers reported by candidates — a benchmark, not a guarantee.

Plus an annual bonus of 5–10% of base salary, or extra pay for night and weekend shifts. See the full role card with metrics and requirements in the KYC specialist profile — live openings for the position are right there too.

How to get in with no experience

1. No formal industry experience is required. The procedures, working with providers, and the internal back office are taught on the job in 2–4 weeks.
2. What actually gets checked: attentiveness (a test task is common — spot the mismatch in a pair of documents), basic literacy, and English from B1–B2.
3. Where newcomers usually come from: industry support, bank operations staff, reception and back-office roles in other fields, law and economics graduates.
4. Willingness to work shifts. As with support, a 24/7 schedule with nights is a condition of entry, not an exception to the rule.

A typical interview test is a set of 5–8 scanned documents, 1–2 of them forged: shifted font, a mismatched date format, an address that doesn't match the profile. The candidate isn't just asked to say "forged" but to explain exactly what raised the flag — that's what's really being tested: not memorized rules, but attention and reasoning.

Open positions in this track are in the "Compliance and AML" section: the category filter shows everything from a KYC junior to Head of Compliance.

Career track: KYC → AML → Compliance Manager

KYC isn't a dead-end position — it's compliance's launchpad. The growth logic is simple: the further up the track, the less routine document checking and the more responsibility for decisions the regulator sees.

Moving on from KYC to AML officers is the most predictable step: someone who's spent a year checking documents and handling escalations already understands the logic of suspicious patterns and moves easily into transaction monitoring and investigations. From there the path leads to compliance managers , where it's no longer individual cases but policies, licences, and coordination with legal and product across the whole company. The final stop for a few is MLRO (money laundering reporting officer), a person with personal liability to the regulator up to and including criminal liability, which is why the market chronically lacks these specialists.

If you prefer the investigative side of the job — digging into specific schemes rather than paper identity checks — the neighboring branch leads to fraud analysts: the same detail-oriented mindset there works not with documents but with the flow of transactions and multi-accounts.

What really determines how fast you move up each step is the number of escalated cases under your belt and your willingness to own a decision you will later be asked to justify. Moving into AML requires almost no technical preparation: the logic of sanctions screening and transaction monitoring is taught on the job, but the habit of arguing a decline and not being afraid to say «no» to the commercial team cannot be built in advance — it only comes with cases.

FAQ

Do you need a specialized degree — law or finance? No. A law or economics degree will help at the interview, but it isn't a requirement: KYC procedures are taught on the job, and what matters isn't the diploma but attention to detail.

How is KYC different from support? Both are ways in without experience, but support answers the player in chat, while KYC works with documents and barely talks to the player directly. If the other side of this same entry point into the industry interests you, check out the article about support agent.

How long does the KYC → AML transition take? Usually 1–2 years — exactly enough time to build a feel for suspicious cases and rack up enough escalations. A detailed breakdown of the whole compliance career ladder, including the ACAMS and ICA certifications, is in the article "How to break into compliance and AML with no experience".

Can you start fully remote? Yes, some operators and verification providers hire KYC teams remotely — the pay range is below Malta's but above the average for your region of residence. More on working from home is in the iGaming remote jobs.

Is it worth getting certified before your first job? There's no point spending money upfront — certificates like ACAMS or ICA aren't required to get into KYC. It makes more sense to get hired, work for six months to a year, and then ask your employer to pay for the course before your move into AML: for most operators it's cheaper to train their own employee than to hire a ready-made specialist off the market.