KYC on a betting site: which documents it may ask for and how to send them safely

Many betting sites ask for identity documents at the worst possible moment: just before the first withdrawal, when you want your money and will send almost anything to get it. That is exactly when fraudsters strike too, so the safest time to think about KYC is before the first deposit, while nothing is at stake.

KYC, short for know your customer, means the operator confirms that the person withdrawing is the person who signed up, and that the payout goes to an account in the same name. A legitimate site does it through its own account pages or its published support address, and tells you in its terms what it may ask for.

What a betting site may ask for

The list is usually written in the T&C, under a heading such as verification or account security. Read it before you deposit, because it tells you what you will need on the day of your first payout.

At 4rabet, the operator we checked, section 6 of the T&C allows a request for a passport, a national ID card or a driving licence, and for proof of address no older than six months, such as a bank statement or utility bill. When we looked, the profile offered no place to upload documents; it held just a Main Info form with personal details. In practice that means the request, if it comes, will arrive through support, so you need to know in advance which support channel is genuine.

A request that goes beyond the published list is a reason to stop and ask why. A site has no need for your net-banking password, your UPI PIN, a card's CVV or an OTP to verify you. Anyone who asks for those is not doing KYC.

The only two routes we would use

Send documents through one of two channels, and nothing else:

• The upload form inside your own account, reached by typing the site's address yourself and signing in.
• The support email address printed in the site's T&C, from the same email you used to register.

Everything else is a risk you do not need. A WhatsApp number that messaged you first, a Telegram "verification desk", a link in an SMS, a Google Form or a support number found through a search ad are all routes that fraudsters use precisely because people in a hurry accept them. A real operator has no reason to collect passports through a personal chat.

If you are unsure whether a request is genuine, reply through the official channel and ask support to confirm it there. A real request will still be valid an hour later. A fake one usually comes with a deadline.

Mark the copy before it leaves your phone

A clean scan of your passport is valuable to anyone who gets hold of it. A marked copy is far less useful. Before sending, add a line of text across the image, without covering the photo or the number the operator needs to read: the site's name, the date and the words "for verification only". Any phone's photo editor can do this in a minute.

On a bank statement, the operator usually needs your name, your address, the bank's name and the date. Balances and individual transactions are rarely relevant, and you can ask support whether a statement with the transaction lines covered is acceptable. Ask before you send, not after.

Keep a note of what you sent, to which address and on what date. If the same document is requested again by someone else a week later, that note tells you at once that something is off.

Requests that mean fraud, not KYC

Some patterns turn up again and again around betting payouts. Treat any of these as a stop sign:

• A "verification fee" before your withdrawal is released. Verification costs the operator, not you.
• A request to share your screen "so support can verify you". Screen sharing shows everything, including OTPs as they arrive.
• A video call where someone asks you to open your banking app.
• A request for a selfie holding a card with the full number visible.
• A message saying your account will be closed within the hour unless you send documents now.

If you have already sent something and now doubt the request, act on the same day. Report it at 1930 or on cybercrime.gov.in, tell your bank if any account details went out, and change the passwords of the email account linked to the betting site.

Do KYC before you need the money

The calmest way to handle verification is to ask about it before the first deposit. Write to the support address in the T&C and ask three things: which documents they will want, how they want them sent, and how long checking usually takes. The answer tells you a good deal about the site, and you will have it in writing.

At 4rabet the T&C allow up to 72 hours for a payout of up to 1,000 euros, and up to 7 days after KYC. Asking early does not shorten that window by itself, but you will know the papers and the genuine route before a payout depends on them, and fraudsters lose the urgent moment they rely on.

One more habit helps: keep your account details consistent from the start. Register with your real name as it appears on your documents, use a bank account in the same name for withdrawals, and do not let anyone else deposit on your behalf. Many verification delays come from small mismatches that are easy to avoid on day one and hard to explain on day thirty.