The sanctions case that explains what a licence is actually for
Could you tell, from a casino’s website or its front door, whether the people behind it had been accused of storing fentanyl and using back rooms to torture rivals? The US Treasury has sanctioned Club La Molienda, a Mexican racetrack it alleges is controlled by Cartel del Noreste, and the casino that ran betting on its races was itself sanctioned earlier with exactly those allegations attached. Licensed casino legitimacy is not a badge in a page footer. It is whether a named regulator with real authority has vetted the owners, can audit the books, and can shut the place down.
That gap, between a venue that appears licensed and a venue whose licence actually means something, is what this case puts on display. It also costs players real money when they get it wrong.
What the Treasury actually sanctioned
According to reporting by casino.org, Club La Molienda, a racetrack on the outskirts of Nuevo Laredo across the border from Laredo, Texas, was among 11 entities and four individuals designated on Tuesday, October 13, in what officials described as their largest financial action against Cartel del Noreste, the successor to Los Zetas. Treasury alleges the track remains under the control of Miguel Ángel Treviño Morales, known as “Z-40”, a cartel founder currently incarcerated in the US, with other cartel figures running it in his absence.
The gambling link is direct. The racetrack operated a betting partnership with Casino Centenario, letting casino customers wager on races held at La Molienda. That arrangement ended when Mexican authorities suspended the casino’s operations in April, following coordinated action with the US. Casino Centenario had been sanctioned that same month, with Treasury accusing the property of laundering drug money through its gambling operations, storing fentanyl and cocaine, and using its back rooms to torture and intimidate cartel enemies. A second property, Diamante Casino in Tampico, and its associated gambling website were sanctioned at the same time over links to the same operating company.
The cartel’s interest in racing is not new. Treasury says Treviño Morales and his brother Oscar Omar Treviño Morales, “Z-42”, used drug proceeds to buy, train and race American quarter horses between 2008 and 2012, laundering more than $22 million, with shell companies and proxies spending $16 million over one 30-month period across Texas, Oklahoma, New Mexico and California. Federal investigators seized 455 horses in June 2012.
Myth one: if a casino is open and taking bets, somebody has checked it
A trading licence proves a venue cleared whatever bar its jurisdiction sets, and nothing more. Casino Centenario was an operating casino with a public partnership with a racetrack right up until authorities suspended it. The useful question is never “is it licensed” but “licensed by whom, and what did that body verify”.
A serious gambling regulator runs fit-and-proper checks on owners, directors and anyone with significant control, which means tracing beneficial ownership rather than accepting the name on the paperwork. It sets capital requirements so the operator can pay out what it owes. It requires game fairness testing, RNG certification and published RTP figures from independent labs. It mandates segregation of player funds from operating accounts, and it provides a dispute route that does not depend on the operator agreeing to be reasonable.
Weak licensing jurisdictions skip most of that and sell the stamp. The licence looks identical in a footer.
| What a strong regulator verifies | What it protects you from |
|---|---|
| Beneficial ownership and criminal-record checks | Playing on a site funded or controlled by people you would never knowingly hand money to |
| Capital reserves and segregated player funds | A balance that cannot be paid because operating cash ran out |
| Independent RNG and RTP testing | Games whose advertised return bears no relation to the code |
| Published AML and KYC policy | A venue that is attractive to criminal money, with you as cover traffic |
| Binding dispute resolution | “Terms and conditions” as the final word on your withdrawal |
Myth two: KYC checks are pointless friction
Anti-money-laundering rules in a casino exist to make the venue useless as a washing machine for criminal cash, and the ID request you resent is the cheapest part of that system. AML compliance has four working parts: verifying who you are (KYC), asking where larger sums came from (source of funds), monitoring transaction patterns for behaviour that does not match ordinary play, and reporting activity above set thresholds or of a suspicious shape to the financial intelligence unit.
Gambling venues are targeted by financial crime for structural reasons. Cash arrives in volume, chips and credits convert it into something that looks like winnings, and a plausible paper trail comes out the other end. Treasury’s allegation against Casino Centenario, that drug money was laundered through gambling operations, describes that textbook route. A racetrack adds another layer: the source material notes the track raised money for the cartel through entry fees charged to horse owners and admission from spectators, while cartel members bought horses to race there.
The honest trade-off is this. An operator that verifies your identity before paying out is slower and more intrusive than one that does not. An operator that never asks is faster because it is not looking, and the money moving alongside yours is not being looked at either.
Myth three: a sanction is just another regulatory slap
A sanction is the end of the road, not a warning letter. It freezes any assets the designated businesses and individuals hold in the US and generally bars Americans from doing business with them. There is no fine to pay and no compliance plan to file your way out of. Banks, payment processors and software suppliers cut contact immediately, because continuing to deal with a designated entity exposes them to the same penalties.
For anyone holding a balance when that happens, the practical outcome is bleak. Funds sitting with a blacklisted operator are frozen or simply gone, payment rails to and from the account stop working, and there is no regulator left to complain to because the body that licensed the venue has either suspended it or was never meaningfully supervising it. Chargebacks against a sanctioned counterparty rarely go anywhere. You are an unsecured creditor of an entity the US financial system has been instructed to avoid.
This is why the check belongs before the deposit. Afterwards there is nothing to check, only something to absorb.
Red flags that mark an unlicensed or high-risk casino
Most risky operators give themselves away in the parts of the site nobody reads. Work through this list before you register:
- No licence number anywhere, or a number that appears only as an image with no link to the regulator
- A licence from a jurisdiction you cannot find a public register for, or a “certificate” issued by a body with no complaints process
- No published AML or KYC policy, and no mention of identity verification in the terms
- Large deposits accepted instantly with no ID requested, and withdrawal rules that only appear once you try to cash out
- No independent testing seals for game fairness, or seals that link nowhere
- A dispute process that ends with the operator’s own support team
- Terms permitting account closure and balance forfeiture at the operator’s sole discretion
- Ownership hidden behind a shell company in a jurisdiction with no beneficial-ownership disclosure
One red flag is worth a pause. Three together is a decision already made.
Five checks before you deposit anywhere
- Find the licence number in the site footer or the terms, along with the licensing body’s full name and the exact corporate entity that holds it.
- Look that number up on the regulator’s own public register, typed in yourself. Do not follow the operator’s link. Confirm the company name on the register matches the one in the terms.
- Confirm the regulator is a recognised gambling authority with enforcement powers and a published complaints route, not a registry that sells certificates.
- Read the AML and KYC disclosure. An operator that explains when it will ask for ID and source of funds is one that intends to pay out through regulated channels.
- Search the operator and its parent company against sanctions and warning lists, including the OFAC sanctions list and the public warning notices gambling regulators publish about unlicensed sites.
Fifteen minutes, done once per operator. Compare that to the cost of learning the answer from a frozen balance.
What this case should change about your routine
The Casino Centenario allegations sit at the extreme end of what weak oversight permits, and most unlicensed sites are nothing like that. They are ordinary businesses that take deposits and stop answering emails. But the mechanism is the same in both cases: no vetting of who owns it, no AML monitoring of what moves through it, no regulator you can escalate to. Licensing and AML rules are not box-ticking invented to annoy you at the cashier. They are the only part of this industry that answers to someone other than the operator.
What remains genuinely unresolved is how long a suspended or sanctioned venue keeps appearing legitimate to the people walking in. Mexican authorities suspended Casino Centenario in April; its racetrack partner stayed in cartel hands until October, per Treasury’s allegations. Registers lag reality, which is why you check the register and the warning lists, not one of them.
Play only on sites you have verified against a regulator you can name, set deposit and loss limits before you start, and treat the money as spent entertainment rather than income. If gambling has stopped feeling like a choice, the same regulated operators are required to offer cool-off periods and self-exclusion, and using them is the one move in this whole business with a guaranteed outcome.
