The Financial Action Task Force (FATF) has published its first detailed review of the gambling sector since 2009, materially updating the standard against which gambling-sector compliance will now be assessed. Supervisors across FATF's 200-plus member jurisdictions are expected to reference these indicators directly in reviews and enforcement action. The relevant question for compliance officers is not whether these indicators apply to their business, but how many of them their current controls would fail to detect.

What has changed since 2009

FATF's last dedicated review of this sector was a 2009 joint report with the Asia/Pacific Group on Money Laundering, developed for an industry centred on physical, cash-driven casino floors. That industry has changed substantially since then:

• Online platforms are now the dominant channel, rather than a supplementary extension of land-based operations, changing how funds move through the sector.

• Cross-border, multi-product operators allow funds to move across jurisdictions in ways a framework built around a single physical venue was not designed to trace.

• Digital payment infrastructure e-wallets, mobile money and virtual assets has largely replaced cash as the primary transaction vector, enabling rapid, anonymous transfers that legacy cash-handling controls are not equipped to identify.

• In-game virtual economies represent an entirely new risk category with no meaningful equivalent in the 2009 analysis.

A compliance framework calibrated to the 2009 sector is not simply outdated at the margins, it was built for a materially different risk landscape than the one that exists today.

Why this report, and why now

This update reflects a substantial evidentiary base: a year-long project drawing on responses from more than 80 jurisdictions, written input from a further 29, and direct industry consultation. Three developments explain its timing:

1. Market growth. The global scale of the gambling and gaming sector has expanded considerably since the last review, increasing the volume of funds moving through channels FATF had not previously examined in depth.

2. A documented shift in where risk sits. FATF's analysis identifies land-based casinos, online casinos, and sports betting as carrying the highest money laundering exposure of any gambling activity, and separately notes that online gaming shows more documented terrorist financing activity than gambling itself. Both findings represent a genuine shift in the distribution of risk, not simply a restatement of prior assumptions.

3. Structural vulnerabilities not previously addressed in detail. FATF specifically identifies beneficial ownership and shareholding structures that can be designed to circumvent regulatory thresholds - a governance-level risk that a transaction-focused, 2009-era framework was not designed to capture.

FATF has been direct about the stakes involved: without effective safeguards, the sector's anonymity, cross-border reach, and rapid payment settlement make it an attractive route for fraudsters, professional money launderers, and organised criminal networks. The full report, "Risks of Gaming and Gambling," is available via FATF's Methods and Trends publications.

Which risk indicators should be prioritised

FATF's full list of indicators spans behavioural, transactional, and structural categories. Three carry particular weight and should be treated as immediate priorities:

1. Fund movement without genuine wagering, and structuring behaviour. FATF prioritises this because it represents the clearest evidence of a platform being used as a laundering conduit rather than a gambling product, and is a pattern that older, transaction-size-focused monitoring was not designed to detect.

2. Suspicious and automated betting patterns. Coordinated or automated betting, and wagers placed across all possible outcomes of an event, are prioritised because they present both money laundering and match-fixing risk simultaneously - a combination regulators are increasingly unwilling to assess separately.

3. Beneficial ownership opacity. FATF treats this as a structural risk rather than an incidental one, since ownership layering is often the mechanism that allows the two behaviours above to go undetected in the first place.

Identity and documentation red flags, along with technical evasion signals such as repeated VPN use, remain relevant but are best treated as corroborating evidence once the categories above have already flagged a case for review.

What compliance officers should be doing:

• Update monitoring rules to detect these specific patterns, since older rule sets are typically built around transaction size, not the fund-movement and betting behaviours FATF now flags

• Refresh beneficial ownership checks across existing relationships, not only new onboarding, as ownership structures can change after a relationship is established

• Brief front-line and customer-facing staff on these red flags, since much suspicious activity is first noticed operationally, before it reaches a monitoring system

• Ensure escalation routes to senior management and the board enable prompt action, so a flagged case results in a decision rather than sitting unresolved

Closing the gap requires more than reading the list

Identifying the relevant indicators is the straightforward part. Building a defensible compliance programme around them requires answering questions most firms have not yet fully addressed:

• Does current risk classification genuinely reflect where FATF now places the highest exposure, or does it still weight cash and land-based activity too heavily?

• Would existing transaction monitoring rules detect structuring or fund movement without genuine wagering, or only the patterns the system was originally designed to flag?

• Could the organisation produce, today, an indicator-by-indicator mapping between FATF's list and its own controls — the standard of evidence a supervisor will now expect to see?

For most compliance teams, answering those questions credibly requires a structured benchmarking exercise: mapping existing controls against each published indicator, reviewing existing customer files retrospectively against the new red flags, and updating monitoring logic and ownership due diligence processes accordingly.

The wider context

This report arrives amid wider scrutiny of gambling-adjacent financial crime risk - from tightening AML supervision generally, to growing attention within football on how sponsorship deals with gambling and crypto-adjacent brands are assessed for reputational and financial crime exposure. Regulators are converging on one expectation: controls should reflect how funds move today, not how they moved when previous guidance was written.

The starting point is clear: review the indicators, map them against existing controls, and address any gaps before a supervisor identifies them independently.

FINOMNI works with firms to benchmark existing controls against FATF's new indicators and to develop a practical remediation plan - please get in touch to discuss what this would look like for your organisation.