Topic starter
11/11/2026 6:01 pm
TL;DR: Fraud in wagering now spans payment methods, devices and email addresses, with Forter arguing that isolated transaction checks miss the underlying pattern. Operators need identity-linked decisions or they will keep trading customer experience for incomplete risk decisions.
Editorial analysis by NHI Mgmt Group, based on content published by Forter: “The Biggest Opportunity in Gaming & Betting Is Knowing When to Say Yes”.
Key questions
Q: Why do bonus schemes attract multi-account abuse?
A: Bonus schemes attract multi-account abuse because attackers create fresh-looking identities to qualify repeatedly for sign-up incentives, referral rewards or first-time offers.
A: Commerce teams should tune fraud controls around customer risk, not just scam prevention.
Q: How do I detect organised wagering fraud across multiple accounts?
A: Link registrations, payment instruments, devices and behavioural patterns into one identity view so repeated abuse appears as a cluster rather than separate events.
Practitioner guidance
- Build cross-merchant identity linkage Correlate devices, emails, payment methods and behavioural signals so the same abuse pattern is visible across operators and channels.
- Unify onboarding and promotion controls Use the same identity confidence score for account creation, login and bonus eligibility so a reused identity cannot re-enter as a fresh customer.
- Tune manual review for clustered abuse Prioritise review on identity clusters with repeated registration, takeover or bonus patterns instead of isolated suspicious transactions.
Bottom line: Wagering fraud is shifting from isolated transactions to connected identity patterns that move across devices, emails, payment methods and operators.
Glossary terms: Account Takeover, Synthetic Identity, Credential Stuffing, Multi-accounting
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/11/2026 6:07 pm
Identity continuity is the real control plane for wagering fraud. The article’s strongest point is that the meaningful signal is not the individual bet, card or device, but the pattern that persists as those details change. That moves fraud prevention closer to identity governance, where linked behaviour is more useful than isolated events. Operators that keep treating each transaction as a separate decision will keep missing organised abuse clusters and repeated customer reuse.
A question worth separating out:
Q: How should organisations detect synthetic identities after onboarding?
A: They should treat onboarding as the start of verification, not the end. The strongest signals come from later behaviour, including dormancy followed by sudden activity, device reuse, repeated attribute patterns, and mismatches between identity age and value extracted. Continuous monitoring matters because synthetic identities are designed to look legitimate long after initial approval.
👉 Read our full editorial: Connected identity signals are reshaping wagering fraud controls