Risk checks built into every payout at Australian gaming venues

The riskiest moment in your venue happens in ten seconds at the cash desk: large sums, a queue, and a staff member who is also pouring beers. ComplyIQ moves the control out of the policy binder and into the payout itself, so identification, due diligence, and management oversight are applied automatically when a threshold is met, not when someone remembers.

Gaming & Cash Controls - Gaming & Cash Controls -  - ComplyIQ - ComplyIQ

Why Payout Controls Fail at the Cash Desk

The payout is where AML/CTF risk concentrates and where controls most often break down. The reason is structural: the policy lives in a binder, but the decision happens at the counter in seconds, under pressure, by staff doing three jobs at once. Controls that depend on memory and discretion don’t survive that moment.

Five Recurring Findings

Staff rely on memory to know when ID, due diligence or escalation applies, under exactly the time pressure where memory fails.

Checks are applied inconsistently. Some payouts are documented, many are not, and there is no way to prove which.

Sub-threshold structuring goes unnoticed because no one aggregates a patron’s payouts across the day or across venues.

Source-of-funds enquiries happen verbally, if at all, and leave no evidence trail behind them.

When a regulator asks “show me”, there is no decision record to produce, just a payout ledger.

Controls embedded where the risk actually happens.

Six capabilities working together, built into the payout workflow of a pub or club, so the right check happens every time without slowing the floor.

Integrated Payout Controls

Checks built into the workflow

When a payout meets an identification or due diligence threshold, the workflow stops and prompts the required step before the transaction can proceed. Not when someone remembers, every time.

ID, due diligence and oversight applied automatically at threshold

Payout halts until the required check is completed

Thresholds configurable per venue and inherited from the group program

No payout proceeds undocumented

Early Risk Identification

System and staff, as it happens

Unusual gaming and payout behaviour is surfaced the moment it occurs, with automated system monitoring combined with structured staff observations captured in a few taps.

Bill stuffing and minimal-play or high-turnover detection

Ticket transfers between patrons flagged

Inconsistent gambling patterns surfaced

Staff observations captured at the point of concern

Guided Staff Actions

What to ask, what to record

When elevated risk is detected, staff are walked through clear operational steps: what to ask, what to record, and when to escalate. The observation is logged automatically, with no training recall required at the counter.

Step-by-step prompts at the payout window

Clear escalation pathway to management

Observation documented automatically

Consistent handling regardless of who is on shift

High-Risk Escalation Framework

Management review before payout

Customers assessed as high risk are subject to structured management review before transactions proceed, so the riskiest payouts never rest on a single staff member’s call.

High-risk customers reviewed before the payout proceeds

Documented management rationale for the decision

Escalation routed to the compliance officer queue

Outcome recorded against the customer profile

Source of Funds and Wealth Enquiries

An evidence trail for EDD

Source-of-funds and source-of-wealth enquiries are captured and retained directly in the customer record, building the evidence trail enhanced due diligence requires, not a verbal exchange that leaves no trace.

SoF and SoW enquiries captured in the customer record

Retained for the seven-year AUSTRAC period

Feeds the enhanced due diligence workflow

Available for independent review and audit

Threshold-Based Due Diligence

Automatic, every time

CDD and EDD requirements apply automatically when regulatory thresholds or elevated risk indicators arise, consistently, every time, across every venue in the group.

CDD and EDD triggered automatically at thresholds

Consistent application across all venues

Ties directly into the patron risk score

Group-wide visibility for the compliance officer

From a $6,000 ticket to an audit-ready record in one workflow.

A typical payout, from the moment a ticket is presented through to a documented decision. The check happens at the counter; the compliance work is captured in the system.

1

Present

A patron presents a $6,000 ticket at the cash desk.

2

Flag

The amount hits the ID threshold. A recent pattern, three sub-threshold payouts this week, is detected.

3

Prompt

Staff are prompted to verify ID and log a source-of-funds question.

4

Review

The aggregated pattern raises a management-review flag before the payout proceeds.

5

Record

Decision, evidence and outcome are saved to the profile. SMR-ready if needed, audit-ready if not.

Staff follow prompts. They don’t make tipping-off calls.

Section 123 of the AML/CTF Act makes tipping off a criminal offence, and the payout window is where it’s most easily breached. ComplyIQ keeps the control protective of staff: they act on what they’re shown, and the sensitive judgements happen in the compliance officer’s workflow, not on the floor.

Role-Based Access

Floor staff see only what they need to act on: identification status, risk tier and escalation instruction, without seeing the underlying flags that drove it.

Tipping-Off Protection

SMR-linked records sit behind a structural containment boundary enforced by the platform, not by staff discretion. Staff do not make tipping-off calls because they are never put in that position.

Policy-Based Framing

When a control changes the payout step, the patron-facing language is uniform and policy-based: “our policy on payouts of this size is to confirm a few details”. The patron cannot infer they have been flagged.

Complete Audit Record

Every prompt, check, escalation and override is logged automatically, without exposing sensitive flags on the floor, and retained for the seven-year AUSTRAC period.

One module of seven. Connected by design.

Gaming and Cash Controls feed the same customer profile and risk score as the rest of the platform. The control applied at the payout reads patron context from CDD, escalates patterns into monitoring, and seeds the SMR workflow when a payout turns suspicious. One lifecycle, not seven disconnected tools.

CDD & KYC

Identification and risk tier provide the patron context the payout control applies.

Transaction Monitoring

Payout patterns feed continuous monitoring and the patron risk score.

SMR Support

A suspicious payout seeds the SMR draft with the supporting transactions attached.

Risk Assessments and Program

The controls applied here are defined and governed in your AML/CTF program.

Common questions on payout controls.

Do staff need to remember when to ask for ID?

No. ComplyIQ applies the threshold automatically and stops the payout until the required check is done. The control does not depend on staff recall at the counter.

What payout risk indicators does it detect?

Bill stuffing, minimal play with high turnover, ticket transfers between patrons, source-of-funds concerns, and inconsistent gambling patterns, combining system signals with staff observations.

Does it still work if the patron is identified later?

Yes. Consolidated customer visibility links all activity to one profile, including where identification happens later in the process, so the full pattern is assessed rather than a single transaction.

Will this slow down the payout queue?

No. Checks only trigger at thresholds or on elevated risk, and staff are guided through them in a few taps, not by digging through a manual or calling a manager from memory.

How does it catch sub-threshold structuring?

It aggregates a patron’s payouts across the day and across venues in the group, so clustering of amounts that each sit below the cap is detected as a single pattern. This is exactly how structuring is designed to hide.

Can controls differ between our venues?

Yes. Payout thresholds and gating are configured per venue and inherited from the group program, so a small single pub and a large multi-room club can each run controls right-sized to their risk.

See Payout Controls in Action

Book a demo to watch ComplyIQ apply the right check at the right moment: threshold-based ID and due diligence, structured escalation, and a complete decision record, built into the payout, not bolted onto it.