...

Identifying bookmaker customers: a passport at the betting shop, age and watchlists alongside TsUPIS

A bookmaker accepts a bet and pays out winnings only to an identified adult player. NeuroVision recognises a passport at the counter without manual entry, checks age, document authenticity, watchlists and sanctions — and complements identification in TsUPIS with anti-fraud in the app.

A player check at a betting shop: passport, age, document validity and watchlists
from 16 ₽ a passport without manual entry, with anti-fraud
195+ countries and territories — players' documents
18+ age threshold from the date of birth in the scenario
5 ₽ check against a list or the Ministry of Internal Affairs database
Passport without entry Document anti-fraud Age 18+ Watchlists and sanctions Liveness Web SDK and API

Russian software register No. 19972 · 152‑FZ

Identification, age and bans: what the law requires of a bookmaker in 2026

The gambling law ties every bet and every payout to identification under 115‑FZ and an age check. Online, part of the work is done by TsUPIS, but the organisation's obligations under 115‑FZ and the new bans of 2026 remain with the bookmaker.

  • Identification and age

    244‑FZ, Art. 4 cl. 10, Art. 6.1 Parts 1 and 3, Art. 8 Parts 3 and 8; 115‑FZ, Arts. 5, 7.

    Player checklist

    Who may play

    • A participant in a gambling game may only be a person aged 18 or over
    • An employee of the organiser may also only be an adult

    When to identify

    • A bet and a payout — only after identification under 115‑FZ and establishing age
    • The rule applies to any gambling at a bookmaker's, not only to sports

    Payout of winnings

    • Winnings are paid out on presentation of an identity document or another identification method under 115‑FZ that establishes age
  • TsUPIS and interactive bets

    244‑FZ, Art. 4 cl. 3.1 and 29, Art. 5 Parts 3 and 6, Art. 6.1 Parts 2.1–2.3, Art. 14.2; 115‑FZ, Art. 7 cl. 1.5‑6.

    Who checks what

    Only through TsUPIS

    • Online gambling is prohibited, except interactive bets with bookmakers and totalisators
    • An interactive bet goes through the unified centre for accounting of bet transfers — a credit institution

    Who identifies

    • TsUPIS carries out identification or simplified identification of the player and establishes age
    • The bookmaker may entrust identification to it under a contract

    What the bookmaker receives

    • Data on the participant and their age, and on interactive bets
    • With the player's consent, TsUPIS may obtain data from Gosuslugi
  • From whom bets must not be accepted

    244‑FZ, Art. 5.2 (Law of 29.12.2025 No. 575‑FZ, from 1 September 2026), Art. 15 Part 3.17; 115‑FZ, Art. 7.

    Self-imposed ban

    Self-imposed ban

    • A citizen included in the list of those who have opted out of gambling may not place bets or enter a betting shop or a personal account
    • The list is maintained by the Unified Gambling Regulator

    Special economic measures

    • Refusal of bets and payout of winnings to a player subject to special economic measures — for identified players

    As an organisation under 115‑FZ

    • Internal control rules, a check against the Rosfinmonitoring list, updating player data and keeping documents for at least five years

Betting shops, online bets, totalisators, lotteries: where a bookmaker needs checks

At the counter the bookmaker identifies the player itself, in the app — TsUPIS. But the document, age and watchlist checks are needed in both channels — and in two more places that are remembered last: at payout and when hiring a cashier.

  • Network of betting shops

    • Full identification under 115‑FZ before a bet — a passport at the counter, not retyping into the till software
    • Age 18+ from the date of birth and signs of forgery — before the bet is accepted
    • Less manual entry at the till on match day
  • Online bets in the app and on the website

    • TsUPIS identifies the player and establishes age; the bookmaker receives the player's data
    • Matching the account against this data and the document — when withdrawing winnings or changing payment details
    • Multi-accounts and bonus hunting — before the bonus is credited
  • Totalisators and racecourses

    • The same 244‑FZ rules: a bet and a payout — after identification and establishing age
    • A till at the racecourse — a passport without manual entry
    • Watchlists and sanctions — before payout
  • Lottery operators and distributors

    • Winnings of 15 000 ₽ or more — identification of the winner
    • Simplified identification is allowed up to 100 000 ₽
    • The winner's passport at the payout point — without manual entry
  • Cashiers and betting shop staff

    • An employee of a gambling organiser may only be an adult
    • A candidate's passport and database checks — before the first shift
    • A repeat check — on transfer to a till that makes payouts
  • Sports betting: betting shops, online bets, totalisators and lotteries

KYC for a bookmaker: what TsUPIS does, what the bookmaker does and where NeuroVision helps

In legal betting a player check has five participants, and none of them covers everything alone. The map of roles helps to understand which checks remain with the bookmaker after TsUPIS and where they can be automated.
NeuroVision does not replace TsUPIS and does not give access to the list of those who have opted out of gambling — it helps the bookmaker perform the checks that the law left to it.

  • TsUPIS

    Accepts interactive bets and transfers them to the bookmaker. Identifies the player fully or in a simplified way and establishes age, with consent — from Gosuslugi data. Passes the player's data to the bookmaker.

    • Art. 6.1, Parts 2.1–2.3; Art. 14.2
  • Bookmaker at a betting shop

    Carries out full identification under 115‑FZ itself and checks age before a bet and a payout. NeuroVision recognises the passport at the counter without manual entry and checks it for forgery.

    • Art. 6.1, Parts 1, 3; Art. 8, Part 8
  • Online bookmaker

    Keeps records of participants and is responsible for internal control rules. Matches the account against TsUPIS data, looks for multi-accounts and checks players against watchlists. NeuroVision — document and Liveness by risk, watchlists and sanctions.

    • Art. 6.1, Art. 7 of 115‑FZ
  • Unified Gambling Regulator

    Maintains the list of those who have opted out of gambling and gives bookmakers and TsUPIS access to it. Receives data on bets and winnings in real time.

    • Art. 5.2; Art. 15, Part 3.15
  • Federal Tax Service and Rosfinmonitoring

    The Federal Tax Service licenses and supervises bookmakers, including under 115‑FZ. Rosfinmonitoring maintains the list of persons involved in extremism and terrorism and receives information on suspicious transactions.

    • Arts. 5, 7 of 115‑FZ
  • NeuroVision

    A Russian passport and documents from 195+ countries and territories without manual entry, anti-fraud, age from the date of birth. Passport validity, watchlists, sanctions and PEP. It provides data for matching against TsUPIS and the self-exclusion list, while the matching itself is carried out by the bookmaker.

    • KYC · AML

From the counter to the payout: how a betting shop checks a player with NeuroVision

A scenario for a retail network: the cashier photographs the passport with a tablet or the till camera, the fields arrive in the accounting system, and the decision on the bet and payout stays with the cashier.

Step 1

Passport at the counter

The player presents a passport, the cashier photographs the spread. Full name, date of birth, series and number arrive in the accounting system without manual entry, and anti-fraud flags a screen photo, a printout and a pasted-in photo.

Recognising a player's passport at the betting shop counter without manual entry
Step 2

Age, validity and watchlists

The scenario compares the date of birth with the 18-year threshold and checks the passport against the Ministry of Internal Affairs database, the Rosfinmonitoring list and sanctions lists. The bookmaker checks a match against the blocked list and the self-exclusion list using the same fields.

Checking age, passport validity and watchlists before a bet
Step 3

Bet, payout and log

The cashier sees the result of each check and accepts the bet or pays out the winnings. Identification data is saved in the participant records — for updating the information and answering a supervisory request.

Log of bookmaker player checks: a bet, a refusal on age and an account match

Bonus hunting, drops and someone else's passport: why formal identification is not enough

Identification answers the question “who”, not “why”

TsUPIS confirms that an account is tied to a real person. That this person is a front, a minor with someone else's document or the owner of ten accounts can only be seen through the bookmaker's checks.

  • 01

    Bonus hunting and multi-accounts

    The welcome bonus is claimed on the accounts of relatives and acquaintances. The same passport series and number, address and device in different accounts are visible before the bonus is credited.

  • 02

    A front player — a “drop”

    The account is opened by a person who was paid for a passport, while another places the bets. A document and Liveness when a large win is withdrawn show who actually receives the money.

  • 03

    Someone else's passport at the counter

    A teenager comes to a betting shop with an older brother's passport or with a photo of a document on a phone. Anti-fraud flags a screen photo, and the validity of the passport is checked against the Ministry of Internal Affairs database.

  • 04

    A player from the list

    A person who is subject to measures or has set up self-exclusion tries to play under a new account. The same full name, date of birth and passport from the recognised document help to find a match.

  • 12 months minimum self-exclusion period
  • twice a day the list of those who have opted out of gambling is updated
  • 5 working days to cancel wagers and return bets to a player from the list

Identification checklist for a bookmaker's player: eight steps before a bet and a payout

The order in which a bookmaker checks a new player and a payout. Each row shows who performs the step: NeuroVision, the bookmaker itself, TsUPIS or a government system.

  • Online: identification or simplified identification and age — in TsUPIS, with consent, from Gosuslugi data TsUPIS
  • Betting shop: full identification under 115‑FZ — from the passport at the counter Bookmaker

  • A Russian passport or a foreigner's document — fields without manual entry NeuroVision
  • Document anti-fraud: a photo of a screen, a printout, a pasted-in photo, traces of editing NeuroVision
  • Validity of a Russian passport against the Ministry of Internal Affairs database NeuroVision

  • Date of birth from the document against the 18-year threshold in the scenario NeuroVision
  • Age from TsUPIS data — for an online player TsUPIS

  • Match the passport series and number against the player database and TsUPIS data — before the bonus and withdrawal Bookmaker
  • Device and withdrawal details — repeated across different accounts? Bookmaker

  • The Rosfinmonitoring list, OFAC, EU, UK and UN sanctions NeuroVision
  • PEP and compliance screening — for large winnings NeuroVision
  • Refusal to a player under special economic measures Bookmaker

  • The list of those who have opted out of gambling — access for the bookmaker and TsUPIS, updated at 12:00 and 24:00 Moscow time Government system
  • Refusal of a bet, entry to a betting shop and a personal account to a player from the list Bookmaker

  • Liveness and matching the face against the photo in the document — when withdrawing a large win and changing payment details NeuroVision
  • If there is doubt about identity — request the document again or refuse the payout Bookmaker

  • Accept the bet, pay out, request the document again or refuse — decided by the bookmaker's employee Bookmaker
  • The data retention period in NeuroVision is set in the scenario settings; the bookmaker keeps identification documents for at least five years NeuroVision
  • NeuroVision — the step is covered by NeuroVision: document recognition, anti-fraud, Liveness and database checks
  • Bookmaker — the bookmaker's own step: matching against the player database and the self-exclusion list, and the decision
  • TsUPIS — the TsUPIS step: identification and age of an online player
  • Government system — the government system's step: the list of those who have opted out of gambling at the Unified Regulator

Self-exclusion from 1 September 2026: what has changed for the bookmaker and TsUPIS

  • A bet from a player on the list

    Risk. From the moment the list is updated, bets and interactive bets must not be accepted from a citizen who has opted out of gambling — neither at a betting shop nor online.

    NeuroVision — provides the full name, date of birth, passport series and number from the document as separate fields — convenient for matching against the list.

    Bookmaker — gets access to the list from the Unified Regulator and matches players after each update, at 12:00 and 24:00 Moscow time.

  • Entry to a betting shop and a personal account

    Risk. The law prohibits a player from the list from entering a betting shop and a personal account on the website and in the app.

    NeuroVision — a passport at the entrance or at the counter is recognised without a queue and retyping.

    Bookmaker — decides where to check: at the entrance, at the till or on login to the personal account.

  • Cancelling wagers and returning bets

    Risk. Within five working days, wagers on events that have not yet occurred must be cancelled and the bets returned, and for events that have occurred — the winnings paid to the account named in the application.

    NeuroVision — matching the full name from the passport against the payout details helps to avoid mixing up the recipient.

    Bookmaker — cancels the wagers and pays out through TsUPIS or to a bank account.

  • A new account under a different number

    Risk. A person from the list registers an account with a new phone or comes to another outlet of the network.

    NeuroVision — the same passport in a new session gives the same fields; anti-fraud flags someone else's document from a screen.

    Bookmaker — matches new accounts against the player database and the list, refuses and does not send advertising.

Self-exclusion has been in force since 1 September 2026 (Art. 5.2 of Law No. 244‑FZ). A citizen applies through Gosuslugi or an MFC for a period of at least 12 months and cannot withdraw the application. The list is not published: only gambling organisers, TsUPIS and the supervisory authorities have access to it.

Re-checking a player: a large win, new details, updating information and suspicious bets

Identification at registration is the minimum the law requires. It is worth repeating the check when the price of an error changes: the player withdraws a large sum, changes payment details or the time to update the information comes.

  • A large win

    Before payout — document, Liveness, watchlists, sanctions and PEP. The money goes to the person who was identified, not to the one who bought the account.

  • New details and device

    The player changes phone or withdrawal method. A repeat session with the document shows that the same person is using the account.

  • Updating information under 115‑FZ

    At least once a year for players who are not low risk and once every three years for the rest. Database checks use previously obtained data, without uploading the passport again.

  • Suspicious bets

    A series of bets on an unlikely outcome, linked accounts, bets right after registration. A repeat check gives the security team data for a decision and for reporting to the supervisory authority.

Bookmaker player checks: catalogue and prices

Each check is enabled separately — the counter, the app and the payout each have their own set. Payment is for completed requests; a check for which there was not enough data is not charged. All database checks are in the general catalogue.

A player at the counter and in the app

A passport without manual entry, anti-fraud, validity and live presence.

  • OCR · anti-fraud

    Russian passport recognition

    A Russian passport is recognised from a photo: the fields arrive as a JSON response to the platform.

    from 16 ₽

    Learn more
  • OCR · anti-fraud

    Foreigners' documents: 195+ countries and territories

    A foreign citizen's document is recognised from a photo; the name in Latin script is taken from the machine-readable zone.

    from 16 ₽

    Learn more
  • KYC

    Liveness and matching the face against the document

    A check that a live person is in front of the camera, and matching their face against the photo in the document — when winnings are withdrawn and payment details change.

    from 29 ₽ per session

    Learn more
  • Police · SMEV

    Validity of a Russian passport

    The authenticity and validity of a Russian passport through the interagency interaction system. It catches expired, replaced, lost and invalid documents and verifies that the passport was issued to this particular person.

    5 ₽ / check

    Learn more

How much does identifying a bookmaker's player cost

A fixed price per check, no subscription fee. The betting shop counter, registration in the app and the payout of winnings are checked differently — you pay only for the steps you have enabled.

  • Document

    from 16 ₽ per session

    Calculate

    A Russian passport or a foreigner's document without manual entry, anti-fraud: a screen photo, a printout, a pasted-in photo, editing. Age from the date of birth — in the scenario. An additional document — 10 ₽.

  • Most popular choice

    Document + Liveness

    from 29 ₽ per session

    Enable

    Everything in “Document”, plus Liveness and matching the face against the photo in the document. For withdrawing large winnings and changing payment details.

  • Lists and databases

    5 ₽ per check

    Build a set

    Rosfinmonitoring list, sanctions, passport validity, wanted status — 5 ₽ each. Compliance screening with PEP — 36 ₽.

One session — one person. The session price falls with volume: at 10 000 checks a year — 18 ₽ according to the calculator. A check for which there was not enough data is not charged. Calculator on the pricing page.

Connecting to the betting shop till and the player's personal account

The check is built in where the player already is: the betting shop till, registration and withdrawal of winnings in the app. The steps are enabled by the scenario rules — a document at the counter, Liveness at withdrawal.

SDK and widget

The Web SDK is embedded in the personal account with one script or an npm package and works in a mobile browser and WebView — including in the bookmaker's app. At the betting shop counter the widget works on the cashier's tablet or on a computer with a camera. Documentation

  • Web SDK
  • WebView
  • REST API
  • Check link

Test scenario in the personal account

Payment for completed checks, the data retention period is set in the scenario, support through a ticket system.

Why bookmakers and totalisators choose NeuroVision

A bookmaker needs a check that does not create a queue at the till on match day, does not break registration in the app and covers what the law left to it after TsUPIS.

Document, age and watchlists — in one platform

The passport is recognised without manual entry, anti-fraud flags a screen photo and a pasted-in photo, age is compared with the threshold in the scenario, and watchlists and sanctions are checked by the same requests. Liveness distinguishes a live player from a photo and a screen.

There is no need to assemble a solution from several vendors and reconcile their responses.

Passport Age Watchlists API

One platform

Document, age, watchlists and Liveness — through the Web SDK and REST API, without several vendors.

A till without retyping

The passport fields arrive in the accounting system immediately.

A Russian developer

Register of Russian software No. 19972; personal data — under 152‑FZ.

Liveness

A check that a live person is in front of the camera, and not a photo or a screen.

Bookmaker glossary: TsUPIS, interactive bet, self-exclusion, simplified identification

A brief guide to the concepts from the gambling law and Law No. 115‑FZ that come up in a bookmaker's work.

Gambling participant
A person aged 18 or over who concludes an agreement on winnings with an organiser or another participant.
Gambling participant
Betting shop
A place where a bookmaker or totalisator accepts bets and pays out winnings, with a till in the service area.
Betting shop
Interactive bet
Money that a player transfers to a bookmaker through TsUPIS, including from a phone and over the internet.
Interactive bet
TsUPIS
The unified centre for accounting of bet transfers of bookmakers and totalisators — a credit institution that accepts interactive bets and identifies players.
Single betting payment hub
Unified Gambling Regulator
A public-law company that monitors bets in real time and maintains the list of those who have opted out of gambling.
Unified gambling regulator
Self-imposed ban
Inclusion of a citizen, at their own application, in the list of those who have opted out of gambling — for at least 12 months, without the right to withdraw the application.
Self-exclusion
Identification
Establishing information about a client under 115‑FZ and confirming it by a document or government systems.
Customer identification
Simplified identification
Establishing the full name and document data and confirming them by one of the methods set out in the law, including through Gosuslugi.
Simplified identification
Updating the records
A repeat check of client data: once a year or once every three years — depending on the risk level.
Customer data update
Liveness
A check that a live person is in front of the camera, and not a photo, a screen, a mask or a deepfake.
Liveness detection

Frequently asked questions about identifying bookmaker customers

Yes. Under the gambling law, a bet is accepted and winnings are paid out only after identification under 115‑FZ and establishing the player's age. A betting shop needs full identification; for interactive bets — identification or simplified identification.

TsUPIS identifies an online player, and the bookmaker may entrust it with this under a contract. But the organisation's obligations under 115‑FZ remain with the bookmaker: internal control rules, watchlists, updating information, self-exclusion and anti-fraud.

At a betting shop — from the date of birth in the document: NeuroVision recognises it and compares it with the 18-year threshold, and checks the validity of the passport against the Ministry of Internal Affairs database. Online, age is established by TsUPIS and passed to the bookmaker.

Self-exclusion has come into force. Bets must not be accepted from a citizen on the list of those who have opted out of gambling, they must not be let into a betting shop or a personal account, and wagers on events that have not yet occurred must be cancelled within five working days.

No. The list is not published; gambling organisers and TsUPIS receive access to it from the Unified Regulator. NeuroVision provides the full name, date of birth and passport data as separate fields — the bookmaker uses them to match the player against the list.

No. Interactive bets are accepted and transferred only by TsUPIS. NeuroVision works alongside it: it recognises the passport at the counter, checks the document, age, watchlists and sanctions and helps to find multi-accounts.

The cashier photographs the passport, and the fields arrive in the accounting system without retyping. Database checks run in the same request.

Match the passport series and number, addresses, devices and withdrawal details across accounts before the bonus is credited. For suspicious accounts — a repeat session with the document and Liveness.

The Web SDK for the website and personal account works in a mobile browser and in a WebView inside the app; for server-side integration there is the REST API. At the counter the widget works on the cashier's tablet or computer.

The retention period is set in the scenario settings, and data can be deleted. Where the servers are located is determined by the contract. The bookmaker itself keeps identification documents under 115‑FZ for at least five years.

Yes, for paying out winnings. Winnings of up to 15 000 ₽ are paid out without identification if there are no suspicions, simplified identification is allowed up to 100 000 ₽, and above that — full identification. The winner's passport is recognised without manual entry.

A passport with anti-fraud — from 16 ₽ per session, with Liveness — from 29 ₽, watchlist and database checks — 5 ₽ each. No subscription fee. Testing — in the personal account test scenario.

We will select checks for your bookmaker

Tell us how many betting shops you have, how many players register in the app each month and which checks already go through TsUPIS. We will propose a scenario for the counter, the app and payouts and set up test access.

Can't put your request into words? Book a call and our team will contact you at a convenient time

Book a call

The company is included in the register of IT companies and the register of personal data operators of the Russian Ministry of Digital Development.

Address: Moscow, Presnenskaya Embankment 12 — Moscow City business centre, Federation Tower. Nearest metro stations: Delovoy Tsentr and Mezhdunarodnaya.