Operators running mandatory know-your-customer re-verification at the 72-hour mark of a new account saw session-60 rebuy rates fall 19% relative to a control cohort using the industry-standard 30-day re-check window, according to a twelve-month study of 41 U.S.-licensed sportsbooks and casino apps conducted between March 2024 and February 2025. The effect held after controlling for deposit limits, bonus type, and state-level advertising spend, though the mechanism remains contested. The finding matters less for the headline number than for what it implies about where identity friction actually lands in the player lifecycle.
What the 72-Hour Intervention Actually Does
The standard compliance posture treats KYC as a gate: verify once, at or near first withdrawal, then leave the account alone. The 72-hour protocol moves verification to a fixed point — three days after registration — regardless of whether the player has requested a payout. Accounts that fail or abandon verification at that checkpoint are restricted to deposit-only status until cleared.
That timing is not arbitrary. Across the study's control group, the median player who would eventually reach a 60th session did so on day 9. Rebuys — additional deposits made within the same calendar day as a prior deposit — clustered heavily in sessions 4 through 12, which map almost cleanly onto days 2 through 6. A 72-hour check lands squarely in that window. A 30-day check does not.
The 19% reduction breaks down unevenly. Among players with a verified identity document on file within the first 24 hours, the effect was 6%. Among those who had not uploaded anything by hour 48, the reduction was 31%. In other words, the intervention is doing most of its work on the segment that was already drifting.
The Compliance Cost Side
None of this is free. Operators in the treatment arm reported a 14% increase in support ticket volume during weeks one and two of account life, and a 2.3-percentage-point rise in same-day registration abandonment. Whether that trade is worth 19% fewer rebuys depends entirely on which number you weight — and on whether you believe rebuys are a revenue line or a harm indicator. Most operators, publicly, call them revenue. Privately, the ones running the 72-hour protocol have stopped.
Why Rebuys Are the Wrong Metric to Celebrate
Here is where the study gets uncomfortable. A 19% cut in session-60 rebuys sounds like harm reduction until you look at what replaced it. Players in the treatment arm who cleared verification showed a 7% increase in average session length by session 40, and an 11% increase in per-session wager volume. The rebuy rate fell; the money did not leave. It reorganized.
This is a well-documented pattern in gambling research: interventions that add friction at one point in the funnel tend to push activity downstream rather than eliminate it. The 72-hour check appears to filter out casual and marginal players while leaving the high-intent cohort — the ones most likely to develop problems — largely intact, just better verified. That is a compliance win. It is not obviously a public health win.
The distinction matters for how regulators read this. If the goal is anti-money-laundering hygiene, a 19% reduction in rapid deposit cycling is genuinely useful. If the goal is reducing gambling harm, the metric is close to meaningless without a 12-month follow-up on the same cohort, which the study does not include.
What the 31% Subgroup Suggests
The unverified-at-48-hours cohort is the interesting one. These players were, pre-intervention, the most likely to rebuy repeatedly in early sessions. Cutting their rebuy rate by 31% while their 90-day retention fell only 4% implies the friction is doing something behavioral, not just administrative. It is not that they stopped gambling; it is that they stopped gambling this way, on this platform, in this pattern.
That is a testable claim and nobody has tested it well. A natural experiment across states with different KYC timing rules would settle it. No such study exists as of this writing.
The 72-Hour Number Is a Policy Choice, Not a Finding
The study's authors are careful to note that 72 hours is not derived from any first-principles model of player behavior. It was chosen because it fit inside the window before most rebuy clustering occurs while remaining operationally feasible for compliance teams working standard business hours. A 48-hour check would likely produce a larger effect and a larger abandonment cost. A 96-hour check would produce less of both. The 19% figure is specific to this parameter, not a general law.
This is worth stating plainly because the number will get cited as if it were portable. It is not. Operators with different deposit-limit defaults, different bonus structures, or different state mixes will see different results. The direction is probably stable; the magnitude is not.
One more caveat: the study covers 41 operators, but the treatment arm is only 9 of them, and those 9 skew toward operators with existing automated document-verification infrastructure. Operators still doing manual review would likely see higher abandonment and a different rebuy curve. The 19% may be an artifact of which operators could implement the protocol cleanly, not of the protocol itself.
What This Means for the Next Compliance Cycle
The practical takeaway for U.S. operators is not "move your KYC to 72 hours." It is that KYC timing is a lever with measurable behavioral effects, and it has been treated for a decade as a checkbox. That is changing — slowly, and mostly because state regulators are starting to ask for outcome data rather than process attestations.
The open question is whether any of this survives contact with a genuine harm-reduction mandate. A 19% rebuy reduction with an 11% wager-volume increase is a net wash on most harm metrics, and possibly a net negative if the downstream activity is more concentrated and less monitored. The next round of studies needs 12-month outcome data, not session-60 proxies. Until then, the 72-hour protocol is a defensible compliance measure and an unproven player-protection one — and the operators adopting it should be honest about which of those two things they are buying.