USDT Casino Canada: How Regulators Watch Crypto Operators in 2026

Stablecoin betting moved from a niche experiment to a standing category on Canadian-facing platforms somewhere around 2022, and the numbers since then explain why. Tether processes more daily volume than any other stablecoin, and for players who don't want their bank statement to read like a casino ledger, USDT casino deposits solve a real problem. The catch sits on the regulatory side.

Canada doesn't run a single national gambling regulator. Provinces do the licensing, the federal Criminal Code sets the outer boundary, and offshore operators sit in a grey zone that has narrowed considerably since the Alcohol and Gaming Commission of Ontario opened its igaming market on April 4, 2022. That date matters more than any bonus table when you're deciding where to send crypto.

This page covers how authorities actually monitor compliance, what happens when a player files a complaint, which operators accept USDT in 2026, and where the practical limits sit. No hype, no invented stats. Just the mechanics, plus the brand-level detail you need to compare.

Which Regulators Actually Oversee USDT Casino Play in Canada?

Four bodies matter, and they don't have equal power. The AGCO licenses and supervises operators in Ontario. The Kahnawake Gaming Commission, based south of Montreal, has issued licences since 1999 and still regulates a handful of offshore-facing brands. The British Columbia Lottery Corporation runs PlayNow, the province's own platform. And the federal government's role is mostly criminal rather than administrative, enforced through the Criminal Code rather than a dedicated gambling act.

Here's the structural problem for stablecoin play. No Canadian provincial regulator has issued a licence to an operator that settles wagers directly on-chain in USDT. Ontario's regulated market requires segregated player funds, CAD-denominated accounting, and integration with iGO, the provincial monitoring system. Crypto rails don't fit that architecture in 2026, so any brand offering USDT deposits to Canadian players is almost certainly licensed offshore.

That isn't automatically bad. It does mean your consumer protection comes from the licensing jurisdiction, not from Queen's Park or the provincial capital nearest you. If the operator holds a Curaçao licence, you're relying on Curaçao's dispute process. If it holds a Kahnawake licence, complaints route through the KGC's own channels. Different bodies, different response times, different leverage.

How does the AGCO monitor compliance on a day-to-day basis?

The AGCO runs a three-year licence cycle with annual reporting obligations in between. Operators must submit monthly revenue and player-fund data, and the commission conducts compliance audits that can be triggered by complaint volume, payment disputes, or advertising breaches. Penalties scale: monetary fines have reached CAD 100,000 per infraction in published cases, and the AGCO has suspended licences outright. For crypto brands, the practical effect is exclusion rather than enforcement, since they can't meet the fund-segregation standard to begin with.

Key takeaway: the AGCO's leverage over USDT operators is indirect. It can't fine a Curaçao-licensed site, but it can pressure payment processors, affiliate networks, and ad platforms that serve Ontario players.

What powers does the Kahnawake Gaming Commission hold?

Kahnawake licenses operators under its own Gaming Regulations, first adopted in 1996 and revised several times since. The commission requires licensees to maintain player funds in trust, submit to periodic audits, and respond to player complaints within defined windows. It publishes disciplinary decisions, which is more transparency than several offshore regulators offer. The catch is jurisdictional reach: the KGC can revoke a licence, but it can't compel a bank in Toronto to do anything.

Roughly a dozen active licensees sit under Kahnawake oversight at any given time, down from a peak of several dozen in the mid-2000s. Many migrated to Curaçao, Malta, or Anjouan as those regimes became cheaper or more marketable. For a player holding USDT, the licence seal on the footer tells you which complaint mechanism you're buying into.

Are offshore licences a red flag for USDT casinos?

Not by themselves. A Curaçao licence (issued under the LOK framework, with reforms rolling through 2024 and 2025) or an Anjouan licence indicates the operator accepted external oversight, however light. What matters more is whether the licence is verifiable, current, and matched to a real corporate entity with a published address. Fake seals are common enough that you should check the regulator's own licensee list rather than trusting the footer graphic.

Where the risk concentrates is unlicensed sites with no seal at all, or seals from jurisdictions that no longer issue gambling licences. Those have no complaint pathway, no audit trail, and no reason to honour a withdrawal once your USDT leaves your wallet. In crypto, the transaction is final in seconds. That removes the chargeback safety net entirely.

How Do Regulators Handle Player Complaints Against Crypto Casinos?

Complaint handling is where the difference between a real licence and a decorative one shows up. The AGCO requires Ontario-licensed operators to maintain an internal dispute process and escalate unresolved matters to the commission, which publishes outcomes. Kahnawake runs a similar process through its compliance department. Offshore regulators vary wildly: Curaçao's reformed regime introduced a formal complaint channel, while some Anjouan-licensed operators route disputes to a generic support inbox.

For USDT players, the evidentiary burden is heavier. Card disputes generate a transaction record your bank can trace. On-chain transfers generate a hash, which is public but doesn't identify the counterparty. If an operator claims a deposit never arrived, you need the transaction ID, the receiving address, and the timestamp. Save all three. Screenshot the deposit page before you send anything.

Timelines matter too. Regulated complaint processes typically run 14 to 30 days for a first response. Third-party mediation services, which some operators now name in their terms, add another layer. If your dispute involves more than a few thousand dollars, the time cost is real, and there's no guarantee of recovery even with a valid complaint.

RegulatorComplaint channelTypical first responsePublishes decisions?Reach over crypto operators
AGCO (Ontario)Internal dispute then commission escalation14–30 daysYesIndirect; licensing exclusion
Kahnawake Gaming CommissionCompliance department15–21 daysYesLicence revocation only
Curaçao (LOK)Formal complaint via regulator30–60 daysLimitedLicence conditions
AnjouanOperator-level only in practiceVariableNoMinimal
Malta Gaming AuthorityStructured player support10–20 daysYesStrong, but few USDT brands

What evidence do regulators require from crypto players?

Three things, consistently. Proof of deposit, which means the transaction hash, the amount, and the receiving wallet address. Proof of account ownership, usually an email thread plus KYC documents if the operator requested them. And a written record of your attempts to resolve the issue directly. Regulators won't touch a complaint until the operator has had a documented chance to respond.

Key takeaway: the on-chain record is your strongest asset and your weakest point. It proves the transfer happened, but it doesn't prove who received it unless the operator's published wallet address matches. Always verify the deposit address against the operator's stated treasury wallet before sending.

Do crypto casinos respond faster to complaints than fiat operators?

Mixed picture. Crypto-native brands often have leaner support teams and respond to live chat within minutes, but escalation paths are thinner. Fiat operators with established compliance departments tend to have slower front-line chat but more structured dispute resolution. In practice, the operator's licence jurisdiction predicts complaint outcomes better than whether it accepts USDT. A Malta-licensed crypto operator will usually outperform an Anjouan-licensed fiat one.

Can a regulator force a USDT casino to refund a player?

Rarely in the direct sense. Regulators can suspend licences, impose fines, and order remediation as a condition of continued operation, which creates pressure to settle. But they can't reach into a blockchain and reverse a transaction. Refunds happen because the operator chooses to process them, not because a regulator executed a clawback. That's the structural reality of stablecoin gambling, and it's worth understanding before you deposit.

Top USDT Casinos Accepting Canadian Players in 2026

The list below reflects operators actively accepting Canadian registrations and processing Tether deposits as of early 2026. Licence status, game libraries, and payout speeds vary considerably. Where a brand is offshore-licensed, that's stated plainly. None of these hold an AGCO licence for crypto settlement, for the reasons covered above.

OperatorLicenceUSDT networksMin. depositWithdrawal window
Stake casinoCuraçaoTRC-20, ERC-20~$1 equivalentInstant to 1 hour
BC.Game casinoCuraçaoTRC-20, ERC-20, BEP-20~$1 equivalentInstant to 2 hours
Roobet casinoCuraçaoTRC-20, ERC-20~$1 equivalentInstant to 4 hours
FortuneJack casinoCuraçaoTRC-20, ERC-20, BEP-20~$5 equivalent10 minutes to 2 hours
BitStarz casinoCuraçaoTRC-20, ERC-20~$5 equivalentUp to 1 hour
7Bit casinoCuraçaoTRC-20, ERC-20~$5 equivalentUp to 1 hour
Vave casinoCuraçaoTRC-20, ERC-20~$1 equivalentInstant to 1 hour
Rainbet casinoCuraçaoTRC-20, ERC-20, SOL~$1 equivalentInstant to 2 hours
Betpanda casinoCuraçaoTRC-20, ERC-20~$1 equivalentInstant to 1 hour
CoincasinoCuraçaoTRC-20, ERC-20, BEP-20~$1 equivalentInstant to 1 hour
Lucky7even casinoCuraçaoTRC-20, ERC-20~$5 equivalentUp to 2 hours
Winshark casinoCuraçaoTRC-20, ERC-20~$5 equivalentUp to 1 hour
RollcasinoCuraçaoTRC-20, ERC-20~$1 equivalentInstant to 1 hour

Network choice affects cost more than most players realise. TRC-20 transfers on Tron cost a fraction of a cent and settle in under a minute, which is why nearly every operator defaults to it. ERC-20 on Ethereum can cost several dollars when the network is busy, and BEP-20 on BNB Chain sits in between. For a $20 deposit, paying $4 in gas on ERC-20 eats 20% of your bankroll before you place a bet.

Which USDT casino has the fastest withdrawal times?

Stake, BC.Game, and Roobet consistently process stablecoin withdrawals within minutes for verified accounts, with manual review kicking in above certain thresholds. FortuneJack and BitStarz run slightly longer windows but batch payouts efficiently. The variable that slows everything down is KYC: an unverified account can wait 24 hours or more regardless of the operator, so completing verification before your first withdrawal request saves real time.

Key takeaway: withdrawal speed is a function of verification status and amount, not just the operator's technology. Accounts verified in advance clear faster than accounts verified mid-withdrawal.

Do these operators accept Canadian players legally?

They accept Canadian registrations, and Canadian federal law doesn't criminalise the player for gambling with an offshore operator. Provincial rules differ. Ontario's regulated market framework directs players toward AGCO-licensed sites, and the province has taken steps against unlicensed operators, though enforcement targets the operator rather than the individual. In practice, players in every province access offshore crypto casinos, and the legal exposure sits with the operator.

That's the honest version. It's not a green light, and it's not a criminal warning either. Provincial regulators discourage it, federal law doesn't prohibit it, and the practical risk to a player is limited to the absence of local consumer protection if something goes wrong.

What game providers work with USDT casinos?

Pragmatic Play, NetEnt, Microgaming, Evolution, Hacksaw Gaming, Play'n GO, Nolimit City, and Relax Gaming all supply crypto-accepting operators. Evolution dominates live dealer with its Lightning Roulette and Crazy Time formats. Hacksaw and Nolimit carry the high-volatility slots that crypto players tend to favour. Microgaming and NetEnt hold the deepest back catalogue. The provider mix on a USDT platform is usually a better quality signal than the bonus offer.

Practical Compliance: KYC, Limits and Responsible Play

Stablecoin deposits don't remove identity checks. Every operator on the table above runs KYC at some stage, usually triggered by a withdrawal request, a deposit above a threshold, or a pattern that looks unusual. Standard documents: government photo ID, proof of address dated within 90 days, and sometimes a selfie or video verification. Processing typically takes 1 to 24 hours once submitted correctly.

Deposit and withdrawal limits vary by account tier. Entry-level accounts often cap withdrawals at a few thousand dollars per day and higher amounts per week. High-roller tiers raise those ceilings after additional verification. Bonus terms interact with all of this: wagering requirements of 35x to 40x on deposit bonuses are standard, and crypto deposits sometimes qualify for reduced wagering or are excluded entirely.

On the responsible play side, Ontario sets the legal gambling age at 19. In Alberta, Manitoba, and Quebec it's 18. The national problem gambling helpline is 1-866-531-2600, operated through ConnexOntario, available 24/7 and free. Self-exclusion is available through Ontario's centralized program for AGCO-licensed sites, and offshore operators typically offer account-level self-exclusion on request, though it isn't coordinated across brands.

Key takeaway: self-exclusion with an offshore crypto operator binds that operator only. If you need a coordinated block across multiple sites, the provincial program is the only mechanism that does it, and it only covers licensed operators.

How does KYC work when you deposit with USDT?

The blockchain records the transfer, not your identity. That's why operators require documentation separately. Typically you'll upload ID and address proof, and the compliance team matches the name on the documents to the name on the account. Third-party deposits, where the USDT comes from someone else's wallet, are a common trigger for account freezes and are usually prohibited in the terms.

What wagering requirements apply to USDT casino bonuses?

Most crypto bonuses carry 35x to 45x wagering on the bonus amount, with some operators applying it to bonus plus deposit. Game contributions vary: slots usually count 100%, live dealer often 10% or less, and table games sometimes 0%. Read the contribution table before claiming anything. A 40x bonus on a $100 deposit requires $4,000 in qualifying wagers before withdrawal.

Can you set deposit limits on a crypto casino account?

Yes, and you should. Most operators offer daily, weekly, and monthly deposit limits, plus session timers and cooling-off periods. Limits set through the account dashboard usually take effect immediately, while increases often carry a 24 to 48 hour delay by design. That delay is deliberate, and it's one of the few player-protection features that works the same way on regulated and offshore platforms.

What should you do if an operator refuses a withdrawal?

Document everything first: transaction hashes, chat transcripts, the operator's stated terms. Then escalate internally through a formal complaint, which most terms require before external escalation. If that fails, file with the licensing regulator, whether that's Curaçao, Kahnawake, or another body named in the footer. Response times run from two weeks to two months. Recovery isn't guaranteed, which is why operator selection matters more than dispute resolution.

For anyone in Canada dealing with gambling harm, the ConnexOntario helpline at 1-866-531-2600 is free, confidential, and staffed around the clock. Provincial self-exclusion registers exist in Ontario, and similar programs operate in other provinces. Use them if the pattern stops being recreational. The legal age is 19 in Ontario and 18 in Alberta, Manitoba, and Quebec, and no operator should be accepting players below those thresholds.

Stablecoin gambling in Canada sits in a genuinely awkward position in 2026. The technology works, the operators function, and the regulatory framework hasn't caught up. That gap is where the risk lives, and it's why the licence footer, the terms page, and the complaint mechanism deserve more of your attention than the welcome bonus ever will. Pick an operator whose regulator you can actually name, verify your account before you need to withdraw, and keep the transaction hashes. Everything else is detail.

How Regulators Verify Operator Solvency and Player Fund Protection

Solvency monitoring separates serious regulators from seal-issuing operations. Ontario requires licensed operators to hold player funds in segregated accounts, audited annually by an independent firm, with shortfalls reportable within days. Kahnawake imposes a similar trust requirement. Curaçao's reformed framework, phased in through 2024 and 2025, introduced capital adequacy thresholds for the first time, though enforcement remains lighter than in Malta or the UK.

Crypto operators complicate the picture because player funds and operating funds often sit in the same wallet infrastructure. A stablecoin balance is fungible, and proving segregation on-chain requires the operator to publish wallet addresses and submit to third-party attestation. Very few do. Those that publish treasury addresses, including a handful of the larger crypto-native brands, give players a verifiable claim that isn't available from operators holding funds in undisclosed accounts.

The practical test for a player is simpler than the accounting. Does the operator publish a reserve attestation? Is there a named auditor? Does the licence register list a real corporate entity with a filing history? Three yes answers put an operator in a small minority. Two is acceptable. One or zero means you're trusting branding alone.

What happens when a crypto casino becomes insolvent?

Player recovery is weak. Insolvency proceedings follow the operator's corporate jurisdiction, not the player's location, and crypto balances held in commingled wallets are treated as unsecured claims in most legal systems. Regulated operators with segregated accounts offer better recovery odds, but even then, the process runs months or years. The lesson is straightforward: don't hold large balances on any platform, crypto or otherwise.

Key takeaway: treat your casino balance as at-risk capital, not a savings account. Withdraw winnings promptly rather than letting them accumulate, because insolvency protection for crypto balances is thin across every jurisdiction.

Do regulators audit crypto casino game fairness?

Some do, indirectly. Regulators require operators to use certified random number generators, typically tested by labs like eCOGRA, iTech Labs, or GLI. The certification applies to the game software, not the operator's wallet handling. Provably fair systems, common on crypto platforms, let players verify individual game outcomes against a published hash, which is a different kind of assurance: it proves the game wasn't manipulated after the fact, but it says nothing about the operator's solvency or complaint handling.

How do advertising rules apply to USDT casinos targeting Canadians?

Ontario's advertising standards prohibit bonus-focused messaging that could appeal to minors and require responsible gambling messaging on all promotions. Offshore operators targeting Canadian players fall outside AGCO jurisdiction, but affiliate networks and ad platforms increasingly enforce their own geo-restrictions. Google's gambling ads policy, for example, requires certification per country, and Canada's certification framework excludes unlicensed offshore operators. That's why you'll see crypto casino ads on some channels and not others.

USDT vs Traditional Payment Methods at Canadian Casinos

Payment method choice affects cost, speed, privacy, and dispute options. Stablecoin transfers settle in seconds to minutes and cost cents on Tron, but they offer no chargeback. Interac e-Transfer, the dominant Canadian rail, settles in 30 minutes to a few hours and supports bank-level dispute processes. Credit cards settle instantly but are frequently blocked for gambling transactions by Canadian issuers, and the fees for the operator run 2% to 3%.

The privacy angle is overstated in most comparisons. A USDT deposit hides the transaction from your bank statement, but the operator still collects KYC documents, and the blockchain record is permanent and public. What you gain is separation from your primary banking relationship, not anonymity. For players who value that separation, it's a legitimate reason to use stablecoins. For everyone else, the calculus is mostly about speed and fees.

MethodSettlement timeTypical costChargeback possible?Bank statement visibility
USDT (TRC-20)Under 1 minuteUnder $0.10NoNone
USDT (ERC-20)1–5 minutes$1–$8 depending on network loadNoNone
Bitcoin10–60 minutes$0.50–$5NoNone
Interac e-Transfer30 min–few hoursOften freeLimitedYes
Credit cardInstantOperator absorbs 2–3%Yes, within 120 daysYes
Bank wire1–3 business days$15–$30RarelyYes

Volatility is the argument that sold stablecoins in the first place. A Bitcoin deposit made at 9am might be worth 3% less by the time the operator credits it, and some platforms lock the conversion rate at confirmation rather than receipt. Tether holds a peg against the US dollar, so a $500 deposit is worth $500 when it lands. For players who don't want currency exposure between deposit and wager, that predictability is the whole point.

Is USDT cheaper than Interac for casino deposits?

On pure transaction cost, yes, dramatically. A TRC-20 transfer costs a fraction of a cent, while Interac is usually free to the player but slower and visible to your bank. The hidden cost with USDT is the conversion spread if you buy stablecoins with Canadian dollars through an exchange, which typically runs 0.1% to 0.5% plus a withdrawal fee. Factor that in and the savings narrow, though they rarely disappear entirely.

Can Canadian banks block USDT casino transactions?

Banks can't block on-chain transfers because they don't process them. What they can do is flag fiat on-ramps: if you buy USDT through a Canadian exchange and the pattern looks gambling-related, the exchange may ask questions or restrict your account. Most Canadian exchanges comply with FINTRAC reporting requirements and treat large or frequent crypto purchases as reportable activity. That's a compliance reality, not a casino-specific rule.

Which is better for high-volume players, crypto or fiat?

Crypto, for most high-volume scenarios. Settlement speed matters more as volume rises, and the absence of per-transaction fees compounds. A player moving $50,000 a month through a casino saves meaningful money on TRC-20 versus wires at $15 to $30 each. The trade-off is the loss of dispute recourse and the operational discipline required to track hashes and verify addresses. If you're not going to do that bookkeeping, fiat's slower rails buy you protection you'll actually use.

Regulatory Trends Shaping USDT Gambling Through 2026 and Beyond

Three developments are worth tracking. First, Curaçao's LOK framework completed its transition period, and operators that didn't re-license under the new rules lost their standing. That culled a number of marginal brands. Second, the AGCO has signalled interest in how provincial boundaries apply to crypto settlement, though no formal policy has been published. Third, federal anti-money-laundering rules under FINTRAC continue to tighten reporting thresholds for crypto service providers.

None of these changes make USDT gambling legal within a provincial licensing framework. What they do is raise the compliance bar for offshore operators, which benefits players indirectly. An operator that re-licensed under Curaçao's new rules has demonstrated it can meet capital and reporting requirements. An operator that didn't is now unlicensed, and the seal on its site is stale.

The practical advice for 2026 is to verify licence status at the source rather than trusting the operator's own claims. Regulator websites publish licensee lists. Cross-reference the corporate entity name, not the brand name, because brands change hands and licences don't always follow. A five-minute check before depositing is worth more than any bonus comparison.

Will Canada introduce federal crypto gambling rules?

No federal framework has been proposed as of early 2026, and the constitutional division of powers makes one unlikely. Gambling regulation sits with the provinces, and the federal role is limited to criminal law. Any change would most likely come through provincial expansion of regulated markets rather than federal legislation, and crypto settlement integration would follow only if a province decides the compliance architecture can accommodate it.

How should players verify a casino's licence before depositing?

Start with the regulator's public register, not the operator's footer. Search the corporate entity name, confirm the licence is active and covers the products you intend to use, and check the licence number against the operator's stated details. If the register lists a different entity, or the licence has lapsed, walk away. This takes under five minutes and eliminates most of the risk that matters.

Key takeaway: licence verification is the single highest-value pre-deposit action available to a player. It's free, it's fast, and it filters out the operators most likely to create withdrawal problems later.

What role do payment processors play in enforcement?

Payment processors act as de facto regulators in markets where formal oversight is thin. Visa and Mastercard maintain merchant category codes that flag gambling transactions, and Canadian issuers routinely decline them. Crypto on-ramps like Canadian exchanges apply their own risk rules. When a processor cuts off an operator, the effect is often faster and more complete than any regulatory action, which is why operators guard those relationships carefully.

Are stablecoin casinos likely to gain provincial licences?

Unlikely in the near term. Provincial frameworks require segregated fiat accounts, CAD accounting, and integration with monitoring systems that assume traditional banking rails. Stablecoin settlement would require regulators to accept on-chain attestation as a substitute for bank-held trust accounts, and no province has signalled willingness to do that. The gap between crypto-native operations and provincial licensing will persist through 2026 and probably beyond.

Frequently Asked Questions About USDT Casinos in Canada

Is it legal to gamble with USDT in Canada?

Canadian federal law doesn't criminalise the player for gambling with an offshore operator, and no statute specifically addresses stablecoin deposits. Provincial rules vary, and Ontario directs players toward AGCO-licensed sites. The legal exposure sits primarily with the operator, not the individual player, though provincial regulators discourage offshore play and offer no consumer protection if a dispute arises.

Which USDT network is best for casino deposits?

TRC-20 on the Tron network is the default for most operators because fees stay under $0.10 and settlement takes under a minute. ERC-20 on Ethereum works everywhere but can cost $1 to $8 when the network is congested. BEP-20 on BNB Chain sits in between. For routine deposits under $500, TRC-20 is almost always the practical choice.

Do USDT casinos report winnings to the CRA?

Operators don't report to the Canada Revenue Agency, and there's no withholding on gambling winnings at the source. The obligation, if any, sits with the player under general income rules, and the CRA's treatment of gambling winnings depends on whether the activity is considered a business or a windfall. Consult a tax professional for your situation rather than relying on general guidance.

Can I use a VPN to access a USDT casino from Ontario?

Technically yes, but it violates most operators' terms of service and can trigger account closure and forfeiture of balances if detected. It also undermines any complaint you might file later, since you'd be in breach of the terms you agreed to. If an operator geo-blocks your province, that's a signal about its compliance posture, not an obstacle to work around.

What is the minimum deposit at most USDT casinos?

Entry-level minimums sit at roughly $1 equivalent on crypto-native platforms like Stake, BC.Game, and Roobet, and around $5 on operators with more traditional account structures. The network fee can exceed the minimum deposit on ERC-20, which is why TRC-20 dominates small deposits. Check the operator's stated minimum before sending anything.

How long do USDT withdrawals take?

Verified accounts at major crypto casinos typically see withdrawals processed in under an hour, with many clearing in minutes. Unverified accounts can wait 24 hours or more while KYC completes. Amounts above certain thresholds, usually a few thousand dollars, often trigger manual review that adds hours. Completing verification before your first withdrawal request is the single biggest time saver.

Are provably fair games regulated?

Provably fair systems let players verify individual game outcomes cryptographically, but they aren't a regulatory requirement and no Canadian regulator certifies them. They provide a different assurance than lab certification: proof the game wasn't manipulated, not proof the operator is solvent or handles complaints fairly. Both matter, and they cover different risks.

Stablecoin gambling in Canada will keep evolving as provincial frameworks mature and offshore operators adjust to tighter compliance expectations. The fundamentals for players don't change much: verify the licence, understand the complaint pathway, complete KYC early, and keep your transaction records. Do those four things and you've eliminated most of the risk that catches people out. Skip them and no bonus percentage will make up the difference.