KEY TAKEAWAYS
The Short Answer: ID Checks Protect Players and Accounts
Online gambling accounts usually require you to prove who you are and how old you are before you can play. This can feel like a lot of paperwork, but it serves several purposes: it keeps underage people out, it helps confirm that a person has not signed up for a self-exclusion program, and it makes it harder for someone to open an account using a stolen identity.
Many people find the process annoying, and some worry about handing over personal information. Both reactions make sense. The good news is that you can take simple steps to share your details safely, and understanding why the checks exist makes them easier to complete without stress.
This guide explains why identity verification exists, what examples from state rules say, a hypothetical example, how to protect your documents and data, common myths and next steps. It is general information, not legal advice, and rules vary by state. It does not name or compare any operator.
Why Age and Identity Checks Exist
The Michigan Gaming Control Board has explained the purpose in a 2024 memo to internet gaming and sports betting operators. State law there requires mechanisms designed to verify the age of participants, ensure proper authorization of transactions and detect and prevent fraud. The memo says identity verification is critical to preventing identity theft, underage gambling, financial fraud and other criminal behavior. The goal is to make sure a person is who they say they are before an account exists.
Other state rules share the same logic. Pennsylvania’s rules for interactive gaming say an operator must verify that the player is of legal age, which is 21 for that program, and is not self-excluded or otherwise prohibited. Connecticut’s regulations say operators must check the state’s self-exclusion database before opening an account and must refuse to open one for an excluded person. For someone who has asked to be excluded, this check works as a safety net.
Age limits differ by product and by place. Connecticut’s rules, for instance, set 21 for online casino games and sports wagering and 18 for fantasy contests, keno and lottery draw games sold online. Checking your own state’s rules, or the help section of the account you are opening, shows what applies to you.
Finally, verification protects you. If someone could open an account in your name with your details, the consequences could land on you. A check at the start reduces that risk, which is why it fits within the broader habits covered in our guide to protecting your gambling account.
What You Are Usually Asked For and How It Works
Exactly what you are asked for depends on the state and the site, but the examples below show a typical pattern. They come from official rules and guidance consulted in October 2026.
The information you provide
Pennsylvania’s player account rules list the information a player must provide: legal name, date of birth, address, email address and telephone number, plus the whole or last four digits of a Social Security number if voluntarily provided, or an equivalent such as a passport or taxpayer identification number for a foreign player. The rules also allow other information used to verify identity. Matching your legal details exactly is important, because a nickname or an old address can cause a mismatch.
How the check is done
Under Pennsylvania’s rules, the operator verifies identity and records the document number of a government-issued credential it examined, or uses another method of remote, multisource authentication approved by the Board. Connecticut’s regulations describe a comprehensive identity check that can include a search of the person’s name, date of birth, address and last four digits of the Social Security number, and identity questions only the real person should know, such as previous addresses. Methods vary by state and site, and some people may be asked to upload a document.
If the check fails
A failed check does not have to be the end. Connecticut’s regulations say that where a prospective patron’s age or identity information is rejected, the person must be given a means to try to resolve it by providing additional identifying information. If you are asked for more information, respond inside the official site or app rather than through a link in a message.
How your information is protected
Rules also address how data is handled. Pennsylvania requires the electronic player file to be encrypted, and Connecticut requires operators to protect verification details as confidential information. These are requirements placed on operators, so it is still sensible to keep your own copies of documents safe and to share them only through official channels.
A Practical Example
Imagine someone who has just signed up for an account. This is a made-up scenario, not a real person. After entering their details, they see a message saying that their identity could not be confirmed.
They think about why. They used a nickname for their first name, and the address on their documents is an old one. Instead of panicking, they go back into the official app they opened themselves, correct the details to match their documents exactly and submit the additional information the app asks for.
A little later they receive an email that says their account will be closed unless they click a link and send a photo of their ID. They pause. The message came out of nowhere, it creates pressure and it asks for documents by link. They do not click. They open the app directly, see no request waiting, and report the email as phishing.
Their approach is simple: go in through the front door they chose themselves, and never respond to pressure. The check at account opening did its job, and the suspicious message did not get what it wanted.
How to Share Your Information Safely
Verification is legitimate when it happens inside an account or app you opened on your own. The same request can be a trap when it arrives unexpectedly. The table shows the difference in general terms.
| Usually fine | A warning sign |
|---|---|
| Entering details while you create an account in an app or site you navigated to yourself | An unexpected email, text or call asking you to verify your identity by clicking a link |
| Uploading a document in the account’s own verification screen | A request to send ID photos by email, text or chat to someone who contacted you |
| Contacting support through the number or page inside your account | A phone number from a message, pop-up or paid search result |
| Taking time to check a request | Pressure to act immediately or your account will be closed |
The Federal Trade Commission advises that if you get a message asking you to click a link, you should ask whether you have an account with the company, and if so contact it using a phone number or website you know is real, not the details in the message. Its guidance on impersonation scams also warns against clicking links in unexpected messages and says to slow down, because scammers rush people. Keeping your own records of what you submitted and when helps if something later looks wrong. For more habits, see our guide to protecting your gambling account from scams and fraud.
Common Myths and Misunderstandings
A few misunderstandings come up often around verification.
One is that an ID check means you are being accused of something. It is a standard step that regulators describe as protection against identity theft, underage gambling and fraud, and it applies to everyone opening an account.
Another is that anyone who asks for your ID must be official. Scammers copy the language of real checks. Real checks happen inside an account you opened, not through a link in an unexpected message.
A third is that a failed check is a final no. Connecticut’s rules say people whose information is rejected must be able to try to resolve it with additional information, and many mismatches come from simple differences such as nicknames or old addresses. A fourth is that more personal information is always better. Share what the official process asks for, and nothing more to anyone who contacts you out of the blue.
Practical Next Steps
Before you open an account, have your documents ready and check that your name and address match them. Use a device and network you trust, and type or save the address of the site or app yourself instead of following a link from a message. Turn on multi-factor authentication once your account exists, and use a strong, unique password.
If you get a surprising verification request, stop. Do not click. Open your account directly, or contact support through the details inside it. If you think you shared documents with the wrong person, contact your bank, and report the scam at ReportFraud.ftc.gov.
If you ever notice that you are verifying accounts in order to keep gambling after you meant to stop, that is a good moment to talk with someone. Free, confidential support is available 24/7 at 1-800-MY-RESET, and our guide to self-exclusion explains how to take a break.
What to Explore Next
For the wider picture of account safety, read how to protect your gambling account. If something has already gone wrong, what to do if your gambling account is hacked walks through recovery.
To understand how exclusion programs connect to account checks, see how gambling self-exclusion works, and for support options, visit gambling help and resources.
Frequently Asked Questions
Why do gambling sites ask for ID?
State rules often require operators to verify age and identity before opening an account. Regulators describe the checks as protection against identity theft, underage gambling and financial fraud. They can also confirm a person is not enrolled in a self-exclusion program.
What information is typically required?
Examples from state rules include legal name, date of birth, address, email, phone number and the last four digits of a Social Security number or an equivalent. Some people are also asked to upload a document. Requirements vary by state and site.
What if my identity check fails?
It may be a simple mismatch, such as a nickname or old address. Connecticut rules, for example, require that people be given a way to resolve a rejection with more identifying information. Respond inside the official site or app, not through a message link.
Is it safe to send my ID by email or text?
Be cautious. Verification should happen inside the account you opened yourself. Unexpected requests for ID by link, email, text or chat are a common scam tactic, so contact the company through details you know are real.
Does age verification differ by state?
Yes. Connecticut, for example, sets 21 for online casino games and sports wagering and 18 for fantasy contests, keno and online lottery draw games. Check your own state rules or the help section of the account you are using.
Need to talk to someone?
Free, confidential help is available 24/7. Call or text the National Problem Gambling Helpline at 1-800-MY-RESET (1-800-697-3738), or use the helpline chat at 1800myreset.org.
If you or someone you know is in crisis or thinking about suicide, call or text 988 (Suicide & Crisis Lifeline).
Sources & References
- Michigan Gaming Control Board — Memo on Identity Verification and Strong Authentication (2024)
- 58 Pa. Code § 812a.2 — Player account registration (Pennsylvania Code and Bulletin)
- Regulations of Connecticut State Agencies § 12-865-12 — Age and Identity Verification
- Federal Trade Commission — How To Recognize and Avoid Phishing Scams
- Federal Trade Commission — Impersonation scams: not what they used to be
- National Council on Problem Gambling — About the National Problem Gambling Helpline
- 988 Suicide & Crisis Lifeline
