Why Won’t a Casino Pay My Winnings?

You won. The balance is there. You hit withdraw, the request goes to “pending” or “review,” and the next thing you get is a 3 a.m. email asking for a document you already sent two weeks ago.

That moment, where the deposit side and the cashout side of an online casino suddenly seem to be run by two different companies, is what most players mean when they search for casino not paying winnings.

Understanding casino withdrawals as a process the operator treats fundamentally differently from deposits is the first mental shift.

As a Gamble Critic expert, I look at these disputes from both sides. Sometimes the operator is stalling in bad faith. More often, something in the terms a clause skimmed past, a KYC request ignored, a max-bet rule broken during a bonus gives the casino a real contractual reason to hold the money. Both situations end the same way for the player. Knowing which one you are in changes what you do next.

Below, I’ll cover the patterns I see most often when a withdrawal stalls, the bonus clauses that quietly kill payouts, where KYC tends to blow up, a few representative cases including the kind of Boho withdrawal complaints that surface around certain Curaçao-licensed sites, and the actual steps to take when an online casino scam payout situation looks like it’s unfolding.

Most Common Reasons

How casino payouts work on the operator’s side is less automated than most players assume. There is a queue, there is a finance team batching the requests, there is an anti-fraud layer, and at some operators a manual approval step that genuinely does not happen overnight.

Start with the most boring one. Pending periods.

Many casinos build in a reversal window of 24 to 72 hours after a withdrawal request. The cashout is not being processed during that time. It is sitting on the player’s side, waiting for the player to either confirm it or cancel and play the money back. A bored player will cancel. I have read complaints from players who lost entire payouts to a pending period that they could have ended with a single message to the cashier asking for the request to be pushed through.

After that boring case, the genuine reasons a casino refused withdrawal usually look like this:

• Bonus terms were broken. Over-betting during wagering, playing a restricted game, or exceeding a max cashout cap. The bonus winnings get voided, sometimes the full balance with them.
• Identity not verified. Documents missing, of poor quality, or mismatched against the account profile.
• Source-of-funds request. Larger wins often trigger a request for bank statements or proof of where deposit money came from. No documents, no withdrawal.
• Multi-account suspicion. Same household, same IP, same payment fingerprint flagged as a duplicate. Even when innocent, this drags out for weeks.
• Restricted region. The player registered from a country the licence does not cover. Often missed at signup, caught at cashout.
• Payment-method mismatch. Some casinos require the withdrawal to return via the deposit method. If that method does not support withdrawals (certain prepaid cards, some local options), the player has to provide and verify an alternative from scratch.

None of those are scams in themselves. The scam, when it exists, sits in how the operator handles them. Slow replies, with documents requested one at a time. And then the real tell: a vague “security check” with no end date attached, dragged across weeks.

A regulated operator under MGA or UKGC has to give you a defined process and a published timeline. Open-ended account review issues, week after week with no clock on them, are almost always a stall.

Bonus Traps

Most withdrawal disputes I read start with a bonus.

Bonuses are not gifts. They are conditional contracts, drafted by the operator’s lawyers to give the operator outs. Before claiming any offer, the clauses that actually decide whether you cash out are:

• Max bet during wagering. Usually €5, sometimes €4. One spin at €5.10 on a slot that defaulted to a higher bet voids the whole bonus and any winnings from it. Some operators use this clause aggressively.
• Game contribution rates. Slots count 100% toward wagering at most sites. Roulette often counts 10% or 20%. Blackjack and video poker sometimes count 0%. Playing the wrong game during wagering means the wagering counter barely moves.
• Maximum cashout from a bonus. Common values are 5x or 10x the bonus amount, or a flat cap like €100. Turn a €20 bonus into €4,000 with a 5x cap and you walk away with €100. The rest is voided once wagering completes.
• Restricted games. Specific high-RTP slots are blocked during bonus play. The list lives in the bonus T&Cs, not in the lobby.
• Wagering basis. A 35x requirement on a €50 deposit plus €50 bonus is €3,500 to turn over. On bonus only, it is €1,750. Same headline, double the work in the worse version.
• Time limits. Bonuses expire after 7, 14, or 30 days. Wagering not finished by then, bonus gone, associated winnings gone with it.
• “Irregular play” or “bonus abuse” clauses. The one I’d flag hardest. Vague language about “low-risk betting” or “covering both sides on roulette” or “abnormal patterns” gives the operator a discretionary tool to void winnings if your play looks unusually skilled or systematic. Some casinos apply this rule fairly. Some use it to refuse cashouts they don’t want to pay.

In my review process I check whether the operator publishes these terms cleanly, in one place, before claiming the bonus. Operators that bury max cashout caps three pages deep, inside an unlinked PDF, are operators I would not deposit to.

KYC Problems

KYC, short for Know Your Customer, is the verification step that turns most withdrawal verification problems into multi-week problems.

The structural issue: a lot of operators do not require KYC at registration. They take your deposit on the strength of an email address and a card number. Verification kicks in only at withdrawal, which is also the moment the operator has the strongest reason to delay. From the player’s side, this feels like a bait and switch. Easy in. Hard out.

Documents typically requested:

• Government issued ID. Passport, driving licence, or national ID card. Both sides where applicable, clear photo, all four corners visible.
• Proof of address dated within the last 3 months. Utility bill, bank statement, or official government letter. Mobile phone bills are sometimes rejected.
• Selfie or liveness video, often holding the ID next to your face.
• Proof of payment method. A photo of the card showing first six and last four digits, middle obscured, CVV hidden. For e-wallets, a screenshot of the account profile.
• Source of funds. Bank statement, payslip, or for crypto users, a statement from the exchange showing the withdrawal to the casino.

Where players actually get stuck is in the mismatches. The address on the ID does not match the account profile because they moved and never updated it. The proof of address is in a partner’s name. The card was lent to them by a parent. The crypto deposit came from an exchange registered under a family member. Each of these gives a legitimate operator a real reason to pause and gives a bad-faith operator a reason to stall.

The practical check, from a player’s perspective, is to complete casino payment verification before depositing, not after winning. Most operators allow this. The ones that don’t are worth a second look before committing real money.

Real Player Cases

The patterns repeat. Three composite cases I see often, each matching a different category of delayed payout situations.

Case one: the single oversized spin. A player deposits €100, takes a 100% bonus, plays through about half the wagering on slots at 2 euro per spin. They switch games, do not notice the new slot defaulted to a higher bet, place one €6 spin, and win on it. Two days later, when they request the €1,800 withdrawal, the casino voids the entire balance citing the max bet rule. The clause was real. The clause was buried. The casino was under no obligation to warn the player at the moment of the violation.

Case two: the indefinite review. A player wins €3,500 on a slot, requests withdrawal, gets a confirmation. Three days later, an email lands: “Your account is under security review.” No timeline. Each follow-up gets a copy-paste version of the same reply for two weeks straight. Sometimes the money is eventually released when the player threatens a regulator complaint. Sometimes it never is. A lot of the complaints I read about smaller Curacao licensed brands, including some Boho withdrawal complaints, follow this exact shape.

Case three: the KYC cascade. A player wins, submits ID. The casino accepts the ID and asks for proof of address. Player submits. Casino asks for proof of payment method. Player submits. Casino asks for source of funds. Player sends a bank statement. Casino asks for a payslip. Each request is technically reasonable in isolation. Stacked together, with three days between each operator response, the process burns a full month of payout approval delays.

The pattern across all three is the same. The operator uses a real, contractual right (to verify identity, to enforce bonus terms, to review for fraud) as a tool to delay. A legitimate operator uses that right and resolves the case. A bad-faith operator uses it and resolves nothing.

How To Recover Money?

If you are already in this situation, the order of steps matters.

1. Get the exact clause cited, in writing. “Your account has been reviewed” is not an answer. Ask which specific term in the T&Cs justifies the hold. Save every email.

2. Submit KYC completely and exactly as requested. If the operator asks for a utility bill, do not send a phone bill. Same name, same address, within the date window. One submission, all documents at once where possible.

3. Re-read the bonus terms with the clause in front of you. Sometimes the operator is right and the case is closed. Sometimes the clause they cite does not actually apply to what you did. Knowing the difference matters before you escalate.

4. Escalate to the regulator. This is where licence quality matters more than anything else.

• MGA (Malta): has a dedicated player support unit and will mediate.
• UKGC: strict, but covers UK residents only.
• SGA / Spelinspektionen in Sweden: strong protections for Swedish residents.
• Curaçao GCB, under the newer LOK framework: offers a complaints process. Enforcement is newer and still being tested.
• No licence visible on the site: you have no regulator to escalate to. This is the worst position to be in, and it is the reason I check licensing first on every operator I review.

5. Use the dispute resolution body listed in the licence. Most regulated operators are required to publish an alternative dispute resolution (ADR) provider. Filing a case there is free and forces the operator to respond formally.

6. Public visibility, used carefully. A documented, factual complaint on player forums sometimes prompts movement from operators who ignore private channels. Stay factual. Inventing details damages your own credibility and gives the operator an out.

7. Chargeback as last resort. A chargeback through your card issuer can recover deposits, not winnings, and only when you can document that the operator breached the contract or processed payments illegally for your region. It typically gets your account closed and any remaining balance frozen. Use it knowing the trade-off.

What I would not do is keep depositing into the same account hoping the issue resolves itself. It will not. Once a withdrawal is held, the answer lives in documentation and escalation, never in more play. That is the foundation of safe withdrawal practices: assume nothing about the payout side until you have seen the casino actually pay.

References

MGA Player Dispute Resolution Process (Malta Gaming Authority)
Online Casino Player Protection Rules (UK Gambling Commission)
Pending Casino Withdrawal Explained (AskGamblers)