AML/CFT and online gambling in New Zealand: 2026 guide

Reviewed 25 September 2026. Anti-money-laundering and countering-financing-of-terrorism (AML/CFT) rules can require reporting entities to identify customers, monitor activity and keep records. The exact duties depend on the entity and current legislation; a site asking for ID is not proof that it holds a New Zealand online casino licence.

Who supervises AML/CFT?

The Department of Internal Affairs says it became New Zealand’s sole AML/CFT supervisor on 1 July 2026. DIA publishes guidance for financial institutions and casinos. The AML/CFT Act 2009 and its 2026 amendments set the legal framework. The 2026 changes make parts of the system more risk-based; do not assume one rigid document list or one identical identity check applies in every case.

What a customer may encounter

An operator or payment service may request identity and address evidence or ask about the source of funds depending on its obligations and risk assessment. Requirements may arise at different points in a customer relationship. Follow the operator’s official instructions, read its privacy notice and ask it why information is needed. Never send identity documents in response to an unsolicited message.

Online casino licensing is separate

The Online Casino Gambling Act 2026 established a staged casino licensing process. DIA expects first NZ online casino licences in early 2027. AML/CFT supervision or tax registration does not establish that a current offshore casino holds that licence. Check the regulator’s current status and our licence tracker before relying on a badge or claim.

If an identity request seems suspicious

Confirm the website domain and contact the operator through its independently located official support channel. Check which organisation will receive the documents and how long it retains them. For gambling harm support, visit Safer Gambling NZ or call 0800 654 655.