Verde Casino Lists a Shared IP Address, a Shared Device and a Payment Error Code as Suspicious Activity

Verde Casino's KYC Policy runs to nine sections: when the casino checks a player's identity, which documents it can ask for, what it treats as suspicious and how payments must match the account. It defines the Website as Verdecasino.com and cites the EU anti-money-laundering directive 2015/849 and the GDPR for how documents are kept.

• A shared connection is on the list. Section 3 gives five examples of suspicious activity: excessive depositing, several devices used to log in within a short time, the player's device used by other users, one IP address used by several users, and one electronic device used by several users. Section 6 adds a telephone, computer or tablet whose device ID matches that of another account in the casino's system. Players in one household on one connection meet an example without doing anything else.
• A payment error counts too. Section 6 also lists several cards used through different payment agents, cards from issuers in different regions, a geolocation mismatch between citizenship, mobile carrier, IP address and card BIN, and "Obtaining a specific error code when making a payment". It then says: "In case of any suspicious activity, mentioned above, this issue shall be directed to the antifraud department in order to evaluate a risk of this user and to conduct further actions." The policy does not name the error code, so a player whose payment fails cannot tell whether the failure was the kind that is referred on.
• USD/EUR 1,000, or whenever staff decide. Standard Verification applies when the total of a user's transactions "reaches or exceeds USD/EUR 1000", when a significant money-laundering or terrorist-financing risk is found, when behaviour suggests a breach of the Terms and Conditions, and "In other cases, when the personnel of the Company consider the Verification as a necessary measure." The amount is fixed, and one of the four triggers is whatever staff decide.
• From an ID photo to a tax notice. The check asks for a copy or photo of an ID document, a photo of the payment card with the cardholder's name visible and only the first 6 and last 4 digits required, and a photo of the player holding the documents. In some situations it adds proof of address, a bank statement or a letter from the workplace, in some cases a tax assessment notice, and a photo of the player holding a handwritten note with the registration email, the date of the request and a confirmation code. A call, video included, may also be requested, and the list ends with "Other documents or data, that may be required by the particular situation." The request has a floor but no ceiling.
• Payments must carry the player's name, and crypto is refused. A card must be in the account holder's name, an e-wallet must use the email the account was registered with, and deposits are never paid out to another user's payment instrument. Section 7 states: "The Company does not accept payments from the anonymous payment instruments (cryptocurrencies, anonymous wallets etc.)." The policy treats every cryptocurrency as anonymous.
• Source of wealth for named groups, and for anyone else. Section 5 adds source-of-wealth documents and a final approval by senior management for politically exposed persons, their families and residents of high-risk countries, and also "C) In other cases, when the Company considers this procedure as a necessary measure." A refusal to be verified may be reported to regulatory, governmental or financial authorities. The enhanced check is written for named risk groups and then opened to any player the company chooses.
• Changes by email, accepted by use. "This Policy may be modified or amended at any time, at the sole discretion of the Company." Registered users are notified by email, and "Any continued usage of the Website after the notification has been sent shall be considered as a fact that user have read and accepted the changes to the Policy." The first visit after the email counts as agreement.

The policy sets no deadline for documents and says nothing about what happens to the account or its balance while a check runs. It is specific only about what counts as suspicious, and that list reaches the way many households share one connection.