Sportsbook sign-up asks 14 fields — the tax file sits at 12
A 14-field sign-up form reveals how Australian sportsbooks sequence compliance, placing the tax file number request at field twelve before deposits
Fourteen fields stand between a new Australian punter and their first bet at one of the bigger locally licensed sportsbooks, and the tax file number request lands at number twelve — after the password, after the date of birth, after the "how did you hear about us", but before the deposit screen. That ordering is not accidental. It's a compliance sequence dressed as a sign-up form, and it tells you what the operator actually needs from you versus what it would merely like.
I ran the same test on four Australian-licensed sportsbooks over a fortnight in March: same email address pattern, same fake-but-plausible details up to the point where the form demanded something I wasn't willing to give, and a screenshot of every screen. Three of the four asked for a TFN somewhere in the flow. None of them explained why on the field itself.
What the fourteen fields actually are
The count varies by a field or two depending on whether you use a social login, but the standard locally licensed flow looks like this:
- Password
- First name
- Last name
- Date of birth
- Mobile number
- Residential address (often split into street, suburb, state, postcode — I'm counting that as one for fairness)
- Occupation
- Source of funds
- "How did you hear about us"
- Marketing consent (pre-ticked, because of course)
- Tax file number
- Identity document upload prompt
- Deposit method
Fields 1 through 7 are the price of entry anywhere. Fields 8 and 9 are anti-money-laundering obligations under the AML/CTF Act, and since the 2024 reforms tightened things further, expect more of this, not less. Field 11 is a dark pattern and you should untick it.
Field 12 is the interesting one.
The tax file number ask is legal, but it isn't mandatory
Here's the thing that gets lost in the outrage threads: an Australian-licensed operator can ask for your TFN. Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006, reporting entities verify identity, and the TFN is one of the documents the Australian Transaction Reports and Analysis Centre (AUSTRAC) accepts as part of that verification. It's on the approved list.
What the operator cannot do is make it a condition of opening an account. The TFN is not a required field under the AML/CTF Rules, and the Australian Taxation Office is explicit that you are not obliged to provide it to anyone who isn't a payer, a bank, or a government agency with a lawful reason. Punters who've had a decent year can also use it to prove their winnings are gambling winnings rather than taxable income, which is the one genuine benefit to handing it over.
So why is it at field 12, sandwiched between marketing consent and the ID upload, rather than in a clearly labelled "optional verification" step after the account is live? Because a field in the main flow gets filled in. A field behind a "verify later" button gets skipped by roughly everyone. Operators know this. The placement is doing the work.
What happens if you skip it
I tested that too. Leaving the TFN blank on two of the three sites let me proceed to the deposit screen with a small grey note reading "you may be asked for this later". On the third, the "continue" button greyed out until I typed something — any nine digits would have done, since the form doesn't validate against the ATO's checksum until a manual review. That's a design choice, and not a good one.
If you decline, expect a verification request within your first few withdrawals rather than at sign-up. Most operators will ask for a driver's licence or passport instead, which satisfies the same AML obligation. The TFN is convenience for them, not a legal necessity.
Where the real friction sits
The TFN gets the attention, but the fields that actually cost punters time and money are 8 and 9 — occupation and source of funds. "Source of funds" is the one that trips people up, because the dropdown options are narrow. Salary, savings, inheritance, sale of property, investments. There's no "I've been running the same $500 bankroll through four books since 2019 and it's fine", which is the honest answer for a large chunk of the recreational market.
Pick the closest option and be ready to back it with a bank statement if you ever withdraw more than a few thousand dollars in a month. Operators are required to verify source of funds above certain thresholds, and the threshold is set by their own risk assessment, not published anywhere. One book I looked at triggers enhanced checks at $5,000 in net deposits over a rolling 90 days. Another waits until $10,000. Neither tells you which until you hit it.
That's a bigger practical issue than the TFN. It's also harder to screenshot and post about.
The compliance logic, and where it stops making sense
I don't think the fourteen fields are malicious in themselves. Australia's AML regime is genuinely strict, and the 2024 amendments pushed customer due diligence earlier in the relationship. An operator that skimps on verification faces penalties that make a few abandoned sign-ups look like rounding error.
But there's a difference between complying and front-loading. The UK's Gambling Commission has moved toward lighter-touch checks at low spend and heavier checks at higher spend — friction proportional to risk. Australia's framework allows something similar in principle. The operators I tested haven't built it that way. They've built a wall, and they've put the tax file number at field 12 because that's where abandonment data says people are still committed enough to keep typing.
The cost of that design lands on the punter who wants to bet $20 on the footy and doesn't fancy handing their TFN to a company they've known for ninety seconds. Some of them will go to an unlicensed operator instead — and that's the outcome the whole regime is meant to prevent.
The open question
If the TFN is optional under the rules but positioned as compulsory in the flow, is the operator verifying you, or is it harvesting? The two aren't mutually exclusive, and AUSTRAC hasn't published guidance on field placement. Until it does, the practical advice is simple: leave field 12 blank, see if the form lets you through, and if it doesn't, ask support in writing why a non-mandatory field is blocking your account. The answer you get back will tell you more about the operator than the fourteen fields did.
And if you're going to hand over identity documents and a tax file number to a business, it's worth doing that with a book you've actually chosen rather than the first one with a sign-up bonus. Set a deposit limit at the same time you set your password. The form won't prompt you to — that field, oddly, never made the list.