Deposit, barely play, withdraw.

18 accounts, all between two and six weeks old, deposited €48,600 by card, between €1,500 and €4,000 each, from 11 issuer BINs. Across the 18, €1,950 was wagered, approximately 4% of the deposits, on low-stake table games. Each account then requested a full withdrawal to an e-wallet. Lagoon’s terms return withdrawals to the deposit source where the method allows it. 14 of the 18 requests give ‘card cancelled’ as the reason for the change.

Deposit, minimal play and a request to change the exit route is the shape of a cash-out through a gaming account, and the shape is what the log shows. Genuine players also cancel cards and lose interest; 18 in ten days is the number that makes the pattern worth a cohort.

All 18 passed identity verification at registration. For 13 accounts the card name matches the account holder. For 5 the card is in a different name, accepted at the time under a ‘family card’ declaration. The e-wallet names match the account holders in all 18 cases. Support holds one ticket from the cohort: a player who says the card was his wife’s and has since been cancelled, with a photo of a cancellation letter attached.

The onboarding file records the checks performed; it does not conclusively establish who controls every session or owns the funding source. Name matches and mismatches are evidence to investigate. A plausible cancellation letter also needs verification through an approved route.

The PSP has forwarded issuer fraud reports on two deposits of €3,500, both in the mismatched-name group. The reports are material evidence but do not establish the operator’s final liability or every account holder’s role. No report is visible for the other sixteen deposits. The fictional compliance runbook permits a temporary hold on these destination-change requests, with a 72-hour review. The AML officer must assess the facts and any reporting or funds-handling requirements before a return or release is arranged.

Reporting can lag, so absence of a report is not affirmative clearance. Fraud investigation and AML assessment have different purposes. Refer the evidence for qualified review rather than treating a risk pattern as an automatic reporting or refund instruction.