KYC for US Sweepstakes Casinos: Staying Compliant as Rules Tighten

The US online sweepstakes market has grown rapidly in recent years, with one estimate suggesting the sector was worth $11 billion in 2025, up from just $3.1 billion in 2022. And this boom has caught the eye of regulators and legislators across the US.

Until recently, the US sweepstakes casinos have been relatively untroubled by regulators, operating under sweepstakes laws that are less stringent than those that generally apply to online gambling. But the tide began to turn in 2025, with states including New York and California banning online sweepstakes games.

As of June 2026, at least a dozen states have now banned or restricted dual-currency sweepstakes platforms, with roughly two dozen more considering legislation this year. For operators hoping to maintain legitimacy, anti-money laundering compliance is a critical consideration, especially given the federal government’s recent focus on ‘restoring integrity to America’s financial system’.

In this environment, effective Know Your Customer (KYC) has become increasingly important for sweepstakes operators. Platforms that treat identity verification as an afterthought, only triggered when players attempt to cash out, are exposed to fraud losses, regulatory action, and reputational damage.

Let’s dig into the legal framework for sweepstakes casino operators, where verification obligations begin, the fraud risks unique to the sweepstakes model, and what a robust compliance program looks like.

What is a sweepstakes casino?

Sweepstakes casinos are online platforms that offer casino-style games, such as slots, table games, and poker, played with virtual currency rather than real-money wagers. They are built on the legal framework of promotional sweepstakes rather than that of licensed gambling.

A sweepstakes is a promotional contest in which prizes are awarded by chance rather than skill. What separates a lawful sweepstakes from a lottery or from gambling is the absence of "consideration."

Under US law, gambling is generally defined by three elements: prize, chance, and consideration (a required payment or entry fee). Removing any of them takes the activity outside the legal definition of gambling. A sweepstakes keeps the prize and chance but removes consideration by guaranteeing a free method of entry.

In a traditional sweepstakes, for example, a participant can enter the prize draw simply by mailing in a postcard, with no purchase required.

Sweepstakes casinos apply this same principle through a dual-currency model. Players use one currency purely for entertainment, which cannot be redeemed for anything of value, and a second, "promotional" currency that can be redeemed for cash or prizes. Crucially, the redeemable currency is always obtainable for free, typically as a bonus when buying the entertainment currency or through a no-cost alternative such as a mail-in or online request. Because players are never required to pay to obtain the redeemable currency, operators argue that no consideration is involved.

This "No Purchase Necessary" structure is the legal cornerstone of the model. Since operators have positioned their products as promotional sweepstakes rather than gambling, they’ve historically been able to run them without a gambling license in most states. This position is increasingly contested, however: a growing number of state regulators and legislatures argue that the gameplay constitutes unlicensed online gambling regardless of the sweepstakes framing, and several have taken enforcement or legislative action against the sector.

For example, in June 2025, New York Attorney General Letitia James announced that 26 online sweepstakes casinos agreed to cease operations in New York following an investigation by the Attorney General's Office and the New York State Gaming Commission. The platforms were found to be offering casino games using sweepstakes coins redeemable for cash or prizes, which New York considered illegal gambling.

The dual-currency model

Sweepstakes casinos operate on a two-currency system:

Gold Coins (GC): The main virtual currency used in sweepstakes casinos for placing bets purely for entertainment. GCs have no cash value and can’t be redeemed for prizes. Players typically receive Gold Coins through daily bonuses and free entry requests, and additional GCs can be purchased with real money.

Sweeps Coins (SC): The secondary, prize-eligible currency. Players obtain Sweeps Coins for free via an alternative method of entry (AMOE) or as a free bonus accompanying Gold Coin purchases, and may redeem accumulated SC for prizes.

Why cash redemptions change the compliance picture

When operators offer a free AMOE, such as a mail-in request or an online form, they eliminate the consideration, or “payment to enter,” element. As a result, they have historically argued that their platforms are promotional sweepstakes rather than gambling.

That argument is weakest at the point where Sweeps Coins become redeemable for cash. Once a player converts winnings into money, the platform has effectively paid out a prize with real value, which brings financial reporting obligations and AML exposure into play and makes identity verification essential. Sweepstakes casinos have typically performed this check only when a player requests a redemption, rather than verifying players at signup.

As regulatory scrutiny increases, however, operators are moving toward earlier KYC checks and more robust identity verification. Verifying players before redemption, or even at registration, helps prevent fraud, supports AML compliance, and demonstrates that the platform is taking responsible measures to protect both users and the business.

Sweepstakes vs. social casino vs. real-money iGaming

Sweepstakes casinos are closely related to social casinos. Both are online gaming platforms that offer casino-style games (such as slots, poker, blackjack, and roulette) and use a virtual currency system for wagers. The difference is that sweepstakes casinos also offer sweepstakes promotions alongside these casino-style games. 

Sweepstakes and social casinos are very different from real-money iGaming (i.e., online betting on games of chance). They can be a popular alternative, especially in states where online gambling with real money is illegal.

These three categories are frequently conflated, but the operational and compliance differences are substantial:

Are sweepstakes casinos legal? The US regulatory picture

Sweepstakes casinos derive their legal basis from a patchwork of federal and state promotional sweepstakes statutes rather than gaming law. Federal Trade Commission (FTC) rules on unfair and deceptive practices, and the Unlawful Internet Gambling Enforcement Act (UIGEA) shapes the boundaries. State-level lottery and gaming statutes determine whether individual platforms can operate in a given jurisdiction.

State-by-state status and recent legislative actions

As of mid-2026, the legal landscape shaping sweepstakes casinos is shifting faster than at any point in the sector's history. In many states, online sweepstakes are not expressly addressed by statute. In many states, including Texas, Florida, Ohio, Illinois, Georgia, Colorado, and Alaska, online sweepstakes are not expressly addressed by statute, and operators rely on the legally untested promotional-sweepstakes framework.

As of mid-2026, the following states have enacted statutory bans on dual-currency online sweepstakes casinos: California, Connecticut, Indiana, Iowa, Louisiana, Maine, Montana, Nevada, New Jersey, New York, Oklahoma, and Tennessee (Oklahoma effective November 1, 2026). Separately, some states, e.g., Michigan and Maryland, have acted through regulatory enforcement rather than statute. Many others have not addressed the activity. Michigan, which licenses real-money iGaming, has nonetheless acted against sweepstakes operators through the Michigan Gaming Control Board's cease-and-desist enforcement rather than under a sweepstakes statute.

This is happening against the backdrop of tightening regulations. Legislative activity in 2025 and 2026 is trending toward restrictions: several states have introduced bills that would require sweepstakes platforms to obtain gaming licenses or comply with the same AML and KYC requirements as real-money operators. 

As a result, operators must account for jurisdiction-specific requirements when determining player eligibility. In practice, this means accurately establishing a player's location and, where required, verifying their residency before allowing participation or processing prize redemptions.

Why the legal model makes identity and eligibility verification crucial

The sweepstakes legal model is predicated on eligibility. For sweepstakes to be lawful, they must be open only to eligible participants, so operators must be able to demonstrate that ineligible participants (such as residents of restricted states, minors, and sanctioned individuals) did not receive prizes. Identity verification and Proof of Address checks help establish eligibility and provide evidence that operators have complied with these requirements.

Do sweepstakes casinos require KYC?

Yes, but not in the same way as licensed online casinos.

In most states, sweepstakes casinos operate outside licensed gambling frameworks and are therefore not subject to the statutory KYC and AML requirements imposed on licensed gaming operators. However, that does not mean identity verification is optional.

Operators still need to verify players for several practical and legal reasons, including:

• confirming prize eligibility
• meeting tax reporting obligations
• complying with their own terms of service
• preventing fraud, bonus abuse, and multi-accounting.

As a result, most sweepstakes casinos perform identity verification before allowing players to redeem prizes, while some have begun introducing earlier verification as regulatory scrutiny increases.

When sweepstakes casinos verify identity: The redemption-trigger model

The dominant industry approach is the redemption-trigger model. This means identity verification is initiated when a player submits their first prize redemption request. Until that point, a player may have registered with only an email address and basic profile information.

Where the model itself is permitted, redemption-triggered KYC is currently defensible, but it leaves a significant compliance gap. Players can accumulate large Sweeps Coin balances before any identity check occurs, creating an opening for fraud, multi-accounting, and potentially the structuring of prize redemptions to avoid verification thresholds.

Verification at prize redemption vs. at signup

Progressive operators are moving toward earlier verification triggers, such as:

• At signup. Collecting identity documents upfront can reduce fraud rates and align with licensed gambling standards.
• At first purchase. Tying verification to the moment a financial relationship begins.
• At first redemption request. 
• At volume thresholds. Some operators implement customer due diligence when a player's accumulated redemptions exceed specified dollar thresholds, which is consistent with a risk-based AML approach.

Tax reporting and source of funds at payout

Any sweepstakes prize of $600 or more in a calendar year triggers a 1099-MISC reporting obligation under IRS rules. This means operators need a player’s:

• Full legal name
• Social Security Number or Individual Taxpayer Identification Number (ITIN)
• Confirmed residential address

These requirements effectively mandate meaningful identity verification for any significant prize winner, making tax compliance a key driver of KYC for sweepstakes casinos.

Eligibility controls beyond identity verification

Identity verification confirms who a player is. Eligibility verification confirms whether they can play and receive prizes. Operators typically check age, location, sanctions status, and, where applicable, self-exclusion.

Age verification requirements

The minimum age to participate in sweepstakes casinos varies by state; most legal states set it at 18+, while some jurisdictions require 21+. Age verification for sweepstakes casinos must be robust enough to catch fraudulent age claims. Document-based checks against a government-issued ID are the standard, with database cross-referencing increasingly common.

Geolocation and restricted states

Geolocation technology is the primary mechanism for enforcing state-by-state restrictions. Operators use IP geolocation combined with GPS data from mobile devices to confirm a player's physical location at login and at key transaction points. Geolocation-based Proof of Address should be calibrated to flag VPN usage, proxy traffic, and other circumvention attempts.

Sanctions and watchlist screening

At prize redemption, operators must screen players against OFAC's Specially Designated Nationals (SDN) list and other applicable sanctions databases. Paying a prize to a sanctioned individual, however inadvertently, carries severe regulatory consequences. AML screening should be automated and updated promptly following OFAC list changes.

Fraud and AML risks unique to the sweepstakes model

Bonus abuse, multi-accounting & mule redemptions

The sweepstakes model's open registration and delayed verification create significant potential for fraudulent techniques such as:

• Bonus abuse. Fraudsters create multiple accounts to exploit welcome bonuses and free Sweeps Coin distributions.
• Multi-accounting. Without upfront identity verification, a single person can maintain dozens of accounts using variations of personal information and temporary email addresses.
• Mule redemptions. Organized fraud rings recruit people (who are often financially vulnerable) to register accounts and process prize redemptions on behalf of others, obscuring the ultimate beneficiary.

Why 'Free-to-Play' does not mean low AML risk

The assumption that sweepstakes platforms carry low AML risk because players aren't depositing real money is a compliance blind spot. Consider the cash flow reality:

• Players purchase Gold Coins with real money, often in significant volumes
• Those purchases fund platform revenue and, indirectly, prize pools
• Prize redemptions represent real cash outflows to players

Regulators and law enforcement have increasingly recognized these risks. Platforms processing millions in monthly prize payouts need systematic AML controls regardless of how the underlying activity is legally characterized.

The sweepstakes KYC process: step-by-step

Depending on their risk profile, sweepstakes casino operators may verify:

• Identity
• Age
• Eligibility (including location)
• Payment method
• Contact information
• Source of funds (for higher-risk cases)

Suggested read: KYC for Gambling: What It Is and Why It’s Crucial

A best-practice sweepstakes KYC process typically follows this sequence:

1. Account registration. Email, name, date of birth, and state of residence collected. Basic eligibility check against restricted states and age thresholds.
2. Geolocation verification. Confirmed at login and at each session. VPN/proxy flags logged.
3. Redemption request initiated. A player submits a prize redemption request. KYC workflow triggered.
4. Document collection. The player submits government-issued photo ID (driver's license, passport, state ID). Proof of address (utility bill, bank statement dated within 90 days) may also be required.
5. Document verification. Automated, AI-powered authenticity checks.
6. Liveness detection. A player selfie is matched against their ID photo. Liveness detection confirms the submission is not a spoofed image or a replay attack.
7. Database cross-referencing. Name, date of birth, and address verified against credit bureau and government databases. OFAC and watchlist screening conducted.
8. Tax information collection. SSN or ITIN is collected for prizes above the reporting thresholds.
9. Enhanced due diligence (EDD). For high-value redemptions or flagged accounts, additional source of funds documentation may be requested.
10. Approval or escalation. Verified accounts are cleared for payout. Flagged accounts are escalated for manual review.

KYC best practices for sweepstakes casino operators

Move verification earlier. The redemption-trigger model is legally defensible today but creates unacceptable exposure to fraud. Binding eligibility and identity verification for sweepstakes casinos to first purchase or account activation reduces the window for abuse, though it may affect conversion rates.

Automate with a layered stack. Choose gambling AML and KYC software that combines document verification, liveness detection, database lookups, and sanctions screening in a single automated workflow to minimize manual review burden and verification latency.

Apply risk-based thresholds. Not every player requires the same depth of verification. A player redeeming $25 in Sweeps Coins presents a different risk profile than one redeeming $5,000. Calibrate your verification depth based on the transaction value and the player's risk score.

Monitor for structuring patterns. Multiple accounts linked by device, IP address, payment method, or redemption behavior should trigger automated alerts.

Maintain audit-ready records. Every verification decision should be logged with a timestamp, documents reviewed, and outcome (i.e., approval, rejection, or escalation). Regulatory inquiries and legal disputes require complete records, so this is an essential form of self-protection.

Stay current on state legislation. The legal map is moving. Build a compliance calendar that tracks legislative sessions in key states and ensures your eligibility controls reflect current law.

Get a KYC platform tailored to the US market

Ensure easy SSN checks, proof of address verification, and compliance.

Find out more

FAQ

• Do sweepstakes casinos require KYC?

  Yes, in practice. While not all jurisdictions mandate KYC at sign-up, most platforms require submission of identity documents, age verification, and address confirmation before processing any redemption. Tax reporting requirements and AML obligations also make a KYC program essential for any operator paying out real cash prizes.

• Are sweepstakes casinos legal in the US?

  The legal picture varies by state and is changing quickly. As of mid-2026, at least 12 states have enacted statutory bans (including California, Connecticut, New York, New Jersey, and Nevada). In most other states, the activity is not expressly addressed. Operators are recommended to confirm the position in each target state before starting operations.

• When does a sweepstakes casino verify your identity?

  Most platforms use a redemption-trigger model where verification is required only when a player first requests a prize payout. Increasingly, forward-thinking sweepstakes casinos are initiating verification at first purchase or at signup.

• Do you pay taxes on sweepstakes casino winnings?

  Yes. Sweepstakes prizes are taxable income under US federal law, and you must report them on your federal tax return, whether or not you receive a tax form from the operator.
  
  For prizes of $600 or more in a year, the operator will usually send you a tax form, typically a 1099-MISC (the form used for non-gambling prize income). You still owe tax on smaller prizes, too; the form is just a reporting trigger, not what makes the income taxable.
  
  Note for the operator: the correct form (1099-MISC vs. W-2G) depends on whether the prize is treated as gambling or non-gambling income. Confirm the form and the $600 threshold against the current IRS instructions.