Ongebruikelijk vs Verdacht: Dutch AML Reporting in Curaçao and the Netherlands

Under Curaçao’s National Ordinance on the Reporting of Unusual Transactions (NORUT) and the Dutch Wet ter voorkoming van witwassen en financieren van terrorisme (Wwft), a licensee reports an ongebruikelijke transactie, an unusual transaction defined by indicators. It does not report a conclusion that crime has occurred. Verdacht, suspicious, is a status the financial intelligence unit assigns after it has analysed the report. As of October 2026, the filing trigger for a Curaçao licensee is therefore an indicator match, such as a transaction of NAf 5,000 or more, and not a judgment of suspicion. A monitoring engine built on the English “suspicious activity report” model will under-report in both jurisdictions.

This comparison sets the Curaçao regime against the Netherlands, with Gibraltar and Canada as reference points for the suspicion-first model. It is based on a reading of the Curaçao Gaming Control Board (GCB) AML/CFT Policy and Compliance Officer requirements, the 2025 Legal 500 Curaçao gambling guide, the consolidated Wwft text on wetten.overheid.nl, and the KSA’s published framework for remote gambling licences.

Two defined terms, two points in the reporting chain

The Dutch statutory vocabulary assigns the licensee one task and the financial intelligence unit another. Chapter 3 of the Wwft is titled “Bepalingen betreffende het melden van ongebruikelijke transacties” (provisions on the reporting of unusual transactions), covering Articles 12 to 23aa. The chapter is organised around the FIU itself (§ 3.1, Articles 12 to 14a), the reporting duty (§ 3.2, Articles 15 to 18a), indemnity for reporters (§ 3.3, Articles 19 to 20c) and secrecy (§ 3.5, Articles 22 to 23aa). The word “ongebruikelijk” frames the whole reporting architecture. The word “verdacht” belongs to the analysis the FIU performs after a report reaches it.

Curaçao’s GCB policy follows the same sequence. It instructs casinos to “detect and report either intended or completed unusual transactions” and requires procedures for recognising, documenting and reporting them. It then describes the FIU concluding, “after proper analysis of an unusual transaction”, that there is a suspicion of money laundering or terrorist financing. The sequence is indicator, report, analysis, suspicion. The licensee owns the first two steps.

“Any unusual behavior needs to be reported to the FIU.” (GCB, AML/CFT Policy, section on customer due diligence)

The Netherlands adds a translation trap. The KSA’s framework summary for remote gambling licensees lists “suspicious transaction reporting to the Financial Intelligence Unit” among Wwft duties. That is a fair English gloss for a reader used to UK or Canadian terminology, but it does not track the chapter structure of the statute. A compliance manual that adopts the gloss will tell staff to escalate when they suspect, and the Wwft chapter is built around reporting unusual transactions.

Curaçao: NORUT indicators and the NAf 5,000 trigger

The GCB’s AML Regulations rest on the National Ordinance on the Identification of Clients when Rendering Services (NOIS), NORUT, the Sanctions National Ordinance and the Kingdom Sanctions Act. According to Legal 500, they became a mandatory component of the casino licensing regime effective 10 April 2025, after a three-month transition. The GCB’s definitions state that “casino” covers both land-based and online casinos, so online licensees sit inside the NORUT reporting perimeter.

The GCB policy states that certain transactions “or intended transactions are deemed unusual”. It bases this on the Ministerial Decree of 1 December 2015 laying down the indicators under article 10 of NORUT (N.G. 2015 no. 73). Three categories are listed.

The first is a transaction reported to the Police or the Department of Justice in connection with money laundering or terrorism financing. The second is a transaction by or on behalf of a person or entity named on a list adopted under the Sanctions National Ordinance (N.G. 2014 no. 55). The third is any transaction of NAf 5,000 or more, “regardless whether the transaction is made in cash, by check or other form of payment, or through electronic or other non-physical means”. The policy defines a cashless transaction as a transfer from a bank account of the casino to a local or international bank account at the request of the client, and says its examples are not limited.

The operational duties follow from that structure. Unusual individual transactions or series of transactions must be reported internally “without any delay”, with supporting documents. The compliance officer prepares the external report. Each casino must register with the FIU and obtain access to the goAML portal after validation. The FIU allows bulk reporting, subject to agreement with the casino’s account manager at the FIU. Reports and supporting documents must be in English. The casino and its directors, officers and employees are protected by law from criminal and civil liability for breach of disclosure restrictions when reporting to the FIU.

The GCB’s compliance officer requirements add that the officer must be at management level, independent from operations and able to act independently. The officer needs 10 hours of annual AML training. Individuals with a relevant degree and AML certification such as CAMS qualify, as do individuals with at least two years of experience in a Money Laundering Reporting Officer role elsewhere. The officer’s listed duties include analysing transactions against the indicators in the Ministerial Decree, reviewing internally reported unusual transactions for completeness, and designing an internal procedure on when a report leads to blocking or freezing an account.

Netherlands: the Wwft and KSA-licensed providers

The Kansspelautoriteit licenses remote gambling under the Remote Gambling Act (Wet Kansspelen op Afstand, KOA), in force from 1 April 2021 with market opening on 1 October 2021. According to the KSA framework, 30 licences had been issued as of October 2025. Licensees must comply with the Wwft, including customer due diligence, verification before establishing business relationships and reporting to the FIU. The consolidated Wwft on wetten.overheid.nl, valid from 1 July 2026, is the operative text.

For reapplications from 1 January 2026, the KSA requires a risk analysis under the Wwft, a detailed exit plan, and documentation on informing the regulator of material business changes. A licensee’s reporting logic therefore sits inside a document the KSA assesses as part of renewal. The KSA assesses applications across modules that include AML and match fixing, and all application documentation must be in Dutch, with exceptions for ICT documents, contracts and audit reports. Indicator logic described in a Dutch-language policy must be consistent with the English-language configuration the monitoring team runs.

The consolidated Wwft text could be retrieved only as a table of contents, so the description of the FIU’s role above rests on the chapter structure and on the GCB policy’s account of the Curaçao FIU. The materials reviewed do not reproduce the objective thresholds or subjective indicator wording that apply to providers of games of chance, and Dutch counsel should confirm the current indicator set. The KSA fined EOD Code SRL €37 million on 22 October 2026 for offering online gambling to Dutch players without a licence, according to Casinobeats on 25 October 2026. That is a licensing penalty, not an AML action, and it shows how actively the regulator pursues anyone serving Dutch players from outside the licensed perimeter.

Side by side: unusual, suspicious and the reporting trigger

The table below compares how four regimes define the licensee’s filing trigger. The Curaçao and Gibraltar rows draw on the GCB policy and the Gibraltar AML Code of Practice for Remote Gambling (2026 update). The Canada row draws on FINTRAC’s suspicious transaction reporting guidance, and the Netherlands row on the Wwft chapter structure. Positions are as of October 2026.

Regime	Reporting term	What triggers the filing	Who characterises it as suspicious	Recipient
Curaçao (NORUT)	Unusual transaction	Match to Ministerial Decree indicators, including any transaction of NAf 5,000 or more	FIU Curaçao, after analysis	FIU Curaçao via goAML, in English
Netherlands (Wwft)	Ongebruikelijke transactie	Duty framed around unusual transactions, Chapter 3, Articles 15 to 18a (indicator set to be confirmed with counsel)	FIU-Nederland, after analysis	FIU-Nederland
Gibraltar (AML Code)	Suspicious or unusual activity report	Knowledge or suspicion of ML/TF, reported internally to the MLRO at the earliest opportunity	Licence Holder’s MLRO	GFIU via the Themis portal
Canada (FINTRAC)	Suspicious transaction report	Reasonable grounds to suspect a transaction relates to an ML or terrorist financing offence	The reporting entity	FINTRAC

Gibraltar and Canada put the suspicion judgment on the licensee. FINTRAC’s guidance separates “possibility” from “probability” and requires the reporter to articulate facts, context and indicators that led to its grounds for suspicion. Gibraltar’s Code sends the internal report to the MLRO on knowledge or suspicion and directs external reports to the GFIU. In Curaçao, an indicator hit reaches the FIU whether or not the MLRO suspects anything, and the characterisation as suspicious happens downstream. The Netherlands follows the same unusual-transaction framing at the level of the Wwft chapter structure.

What the distinction does to threshold logic and tipping off

The NAf 5,000 category operates as a rule that applies to a transaction of that size by any payment method, so a deposit or a payout above the line creates a reportable event on its own terms. The GCB policy says its indicator examples are not limited, so the threshold sets a floor for monitoring and does not cap what must be escalated. A rules engine that routes sub-threshold behaviour to “no action” will miss the policy’s requirement to pay special attention to “complex, unusually large transactions, and all unusual patterns of transactions, which have no apparent economic or visible lawful purpose”.

The Curaçao framework also carries a third concept in its customer due diligence rules. If requested CDD information is not received within 30 days from the moment the NAf 4,000 threshold was reached, the casino must terminate the relationship and report the transaction to the FIU if a presumption of money laundering or terrorist financing exists. If no presumption exists, the funds go back to the same bank account or wallet they were deposited from. Curaçao’s policy therefore recognises indicator-based unusualness, a licensee-level presumption and an FIU-level suspicion.

The following table sets out the numeric parameters in the Curaçao regime as of October 2026. Euro equivalents are those given in the Legal 500 guide and are indicative only.

Parameter	Value	Source
Customer due diligence trigger	NAf 4,000 (about €1,926)	Legal 500 Curaçao guide 2025, GCB AML/CFT Policy
Deemed-unusual transaction trigger	NAf 5,000 (about €2,406), any payment method	GCB AML/CFT Policy, Ministerial Decree N.G. 2015 no. 73
CDD completion window after the NAf 4,000 trigger	30 days	GCB AML/CFT Policy
Record retention	At least 5 years	Legal 500 Curaçao guide 2025
Compliance officer annual AML training	At least 10 hours	GCB Compliance Officer requirements
GCB AML Regulations mandatory from	10 April 2025	Legal 500 Curaçao guide 2025

The GCB documents reviewed state every threshold in Netherlands Antillean guilders (NAf). Payment-system configuration should reference the threshold currency as written in the decree and policy, and document any conversion applied.

Disclosure to the customer of a report is strictly prohibited under the Curaçao framework. The GCB requires the compliance officer to design an internal procedure on when reporting leads to blocking or freezing of user accounts, “taking into account the risk of tipping off the player”. The CDD rules make the same point, noting that blocking an account may itself tip the customer off.

Under the two-stage structure, a licensee that has only filed an unusual transaction report has no determination that the transaction is suspicious, and its customer-facing communications should be consistent with that. An account closure notice, a withdrawal delay message or a request for source-of-funds documents cannot refer to the report. Support scripts, chargeback correspondence and retention-team outreach should be reviewed for language that reveals a report exists. The Wwft chapter on secrecy (Articles 22 to 23aa) and the Curaçao prohibition both address disclosure, so frontline training needs to cover them.

Curaçao also requires training on “objective and subjective indicators for reporting unusual transactions” for employees who handle customers or transactions. Subjective indicators call for staff judgment, so the escalation route for a frontline observation must reach the compliance officer without delay.

Export to other Kingdom jurisdictions

The GCB policy notes that the Dutch Kingdom is a member of the FATF and that Curaçao is a member of the Caribbean Financial Action Task Force. The Kingdom Sanctions Act applies alongside the Curaçao ordinances. The ongebruikelijk and verdacht vocabulary is shared drafting heritage across the Kingdom’s constituent countries, so a taxonomy built for Curaçao and the Netherlands can serve as the template for others.

The Aruba, Sint Maarten and Caribbean Netherlands (BES) texts were not reviewed for this article, and their indicator decrees, thresholds and FIU portals will differ from Curaçao’s. A licensee operating in more than one Kingdom jurisdiction should hold a jurisdiction-specific indicator library behind one common case-management taxonomy, and qualified local counsel should confirm each library against the current ordinance text.

Decision frame: which build for which licensee

As of October 2026, a Curaçao-only licensee with no Dutch nexus should configure its engine to the Ministerial Decree indicators first, treat NAf 5,000 as an automatic report trigger per transaction and for series of transactions, and keep a distinct presumption-and-suspicion workflow for CDD failures. Reporting runs through goAML in English, and the compliance officer must meet the GCB’s fit and proper requirements. Dutch-resident players fall under the KSA licensing regime, as the EOD Code penalty shows, so Dutch-resident account detection belongs in the geo-blocking and KYC stack.

A KSA licensee should anchor its reporting logic in the Wwft risk analysis the KSA requires on reapplication from 1 January 2026. It should confirm the current indicator set for providers of games of chance with Dutch counsel, and write its policy in Dutch where the KSA’s documentation rules require it. Reports go to FIU-Nederland, and the licensee should not copy Curaçao’s NAf figures or its goAML conventions.

A group holding both a KSA licence and a Curaçao licence needs one taxonomy with three states (indicator match, licensee presumption, FIU suspicion) and two indicator libraries. Each library should carry its own legal citation and review date. Operators with UK or Canadian licences who are adding a Kingdom jurisdiction should map their existing suspicion-based reports onto the unusual-transaction duty rather than assume equivalence. For the licensing background to the Curaçao side, see the analysis of the LOK framework transition. Jurisdiction-specific application of NORUT, the Wwft and any lower-level indicator decree requires advice from qualified legal counsel. Review your current monitoring configuration against the thresholds and terminology in this article, and update your compliance officer’s procedures to align with the indicator-led, not suspicion-led, reporting structure for your licence jurisdiction.

Frequently asked questions

What is the difference between an unusual and a suspicious transaction under Dutch AML law? An unusual transaction (ongebruikelijke transactie) is one that meets defined indicators, and it is what the licensee reports. A transaction becomes verdacht when the FIU, after analysing the report, concludes that there is a suspicion of money laundering or terrorist financing.

What triggers a NORUT report for a Curaçao online casino licensee? The GCB policy deems three categories unusual. They are transactions reported to the Police or Department of Justice in connection with ML/TF, transactions involving persons on Sanctions National Ordinance lists, and transactions of NAf 5,000 or more by any payment method. The report goes to FIU Curaçao via goAML in English.

Does a Curaçao licensee need to wait for suspicion before reporting? No. Unusual transactions meeting the indicators must be reported internally without delay and then externally by the compliance officer. Suspicion is not a precondition, although the policy separately requires a report where a presumption of ML/TF exists after CDD failure.

Do KSA licensees file the same kind of report? The Wwft’s reporting chapter is built around unusual transactions reported to FIU-Nederland, although English summaries often call it suspicious transaction reporting. The sources reviewed do not reproduce the Dutch indicator set, which counsel should confirm.

Key Resources

Wet ter voorkoming van witwassen en financieren van terrorisme (Wwft), BWBR0024282, consolidated text valid from 1 July 2026, on wetten.overheid.nl, Chapter 3 (Articles 12 to 23aa).

Curaçao Gaming Control Board, AML/CFT Policy for casinos and Compliance Officer Role and Requirements under NOIS/NORUT, including the Ministerial Decree of 1 December 2015 (N.G. 2015 no. 73) on indicators of unusual transactions.

Kansspelautoriteit, Remote Gambling (KOA) licensing framework and Wwft obligations, 2026 renewal requirements.

Legal 500 Country Comparative Guide, Curaçao Gambling Law 2025, Gibraltar AML Code of Practice for Remote Gambling (2026 update); FINTRAC suspicious transaction reporting guidance.