TL;DR: Fraud in iGaming is reshaping operator growth, regulatory pressure and investor due diligence, with the SumSub-hosted panel at ICE Barcelona highlighting tension between acquisition and prevention, unlicensed operators, Brazil’s evolving framework, and World Cup-driven fraud angles. The core issue is that fraud is no longer a side control problem, it is now a market and governance constraint.
NHIMG editorial — based on content published by SumSub: a live discussion on fraud in iGaming and the widening global fraud landscape
Questions worth separating out
Q: How should iGaming operators balance player acquisition with fraud prevention?
A: Operators should treat acquisition and fraud prevention as two separate trust decisions, not one onboarding step.
Q: Why do multi-accounting and bonus abuse create such a governance problem in iGaming?
A: They break the assumption that one account equals one economic actor.
Q: When should operators prioritise stronger verification over lower onboarding friction?
A: Operators should prioritise stronger verification when the next action creates financial exposure, such as bonus release, high-value deposits or withdrawals.
Practitioner guidance
- Separate acquisition trust from payout trust Treat sign-up, bonus eligibility and withdrawal approval as distinct assurance moments.
- Add jurisdiction-aware policy layers Apply market-specific rules for identity proofing, transaction review and payouts so local regulatory gaps do not define the enterprise control baseline.
- Correlate identity and transaction signals Link device, payment, velocity and behavioural signals across accounts to identify multi-accounting and coordinated abuse that single-event alerts will miss.
What's in the full article
SumSub's full article covers the operational detail this post intentionally leaves for the source:
- Panel-specific observations from operators, gaming partners and liquidity specialists on fraud pressure points
- Discussion of how Brazil's evolving regulatory framework changes practical control decisions
- Event-driven fraud patterns linked to major sporting moments such as the World Cup
- The panel's full perspective on AI-driven threats and how they affect sportsbook operations
👉 Read SumSub's discussion of iGaming fraud, regulation and AI-driven threats →
iGaming fraud and AI-driven abuse: what operators need to know?
Explore further
Fraud in iGaming is now an identity governance problem, not a narrow abuse problem. The panel makes clear that player trust, payment integrity and regulatory compliance now move together. When operators treat fraud as only a detection issue, they miss the lifecycle question: who is allowed to create value, extract value and repeat that pattern at scale? The practitioner conclusion is that fraud controls now belong in the same governance conversation as access, onboarding and account lifecycle management.
A few things that frame the scale:
- 97% of NHIs carry excessive privileges, increasing unauthorised access and broadening the attack surface, according to the Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which means most identity programmes still cannot see their non-human estate clearly.
A question worth separating out:
Q: What should compliance and security teams do when fraud risk affects investor due diligence?
A: They should report fraud as a business assurance metric, not only a loss-prevention metric. That means linking identity controls to bonus abuse, payout integrity, market exposure and control coverage by jurisdiction. Investors will read the quality of those controls as evidence of operational discipline, so the reporting model has to show more than incident counts.
👉 Read our full editorial: iGaming fraud is reshaping growth, regulation and due diligence