Every bookmaker became a bank. This is the handbook for what comes next.

Since 2018, real-money wagering went from Las Vegas to 39 states plus DC, and regulated markets kept growing across the UK, Europe, and Australia. US commercial gaming revenue nearly doubled to $78.7 billion. Under US law, operators are financial institutions under the Bank Secrecy Act; under UK, EU, and Australian frameworks, obliged entities. Legal process follows money: Kraken’s government requests grew 38.6 percent in one year, Coinbase fields over ten thousand a year, and casinos filed roughly 77,000 suspicious activity reports in fiscal 2025. There is no reason to expect betting to be exempt. At many operators, the whole function is still one person with an inbox and a spreadsheet.

Forged subpoenas are cheap, good, and industrialized, and compromised law enforcement email accounts trade openly by country and agency. A betting operator’s response file holds verified identity, payment records, and a complete financial history, which makes this vertical a priority target. The handbook covers verification that works before any data moves: every requester, every time, at network scale.

Built on the public record: the enforcement ledger, the FBI’s own threat advisories, the statutes, and the operational playbook Kodex published for this function, translated for betting. Intake design, multi-entity routing, verification, production discipline, showing your work to regulators, and the maturity model to place your own operation. It closes with The Rules, one page your team can pin above the desk.