TL;DR: Major sporting events create ideal conditions for fraud to scale because betting volume, fragmented markets, and cross-border participation combine with multi-accounting, bonus abuse, and AI-driven synthetic identities, according to SumSub. The lesson is that identity controls built for isolated platforms cannot contain coordinated abuse when attackers can move faster than review cycles and operator boundaries.
NHIMG editorial — based on content published by SumSub: a discussion of World Cup betting fraud, synthetic identities, and integrity collaboration
By the numbers:
- 80% of identity breaches involved compromised non-human identities such as service accounts and API keys.
- 97% of NHIs carry excessive privileges, increasing unauthorised access and broadening the attack surface.
- 92% of organisations expose NHIs to third parties, raising concerns about supply chain security.
Questions worth separating out
Q: How should betting operators handle multi-accounting during major sporting events?
A: They should treat multi-accounting as a cross-journey identity correlation problem, not just a registration issue.
Q: Why do fragmented betting markets make fraud harder to stop?
A: Fragmentation breaks visibility.
Q: What breaks when identity checks focus only on sign-up verification?
A: Abuse shifts downstream.
Practitioner guidance
- Correlate identity signals across the full betting journey Link onboarding, device, payment, session, and behavioural data so one actor cannot appear distinct across different touchpoints.
- Pre-stage cross-operator escalation for major events Define who shares what, when, and with which thresholds before tournament traffic spikes.
- Tune controls for synthetic identity drift Use layered verification that combines document checks, behavioural analytics, and historical consistency scoring.
What's in the full article
SumSub's full article covers the operational detail this post intentionally leaves for the source:
- The guest discussion with Ludovico Calvi on how integrity networks coordinate during major tournaments.
- Specific examples of multi-accounting, bonus abuse, and coordinated betting syndicate behaviour.
- The role of real-time data sharing and integrity war rooms in cross-border fraud detection.
- The article’s perspective on balancing rapid growth with resilient defences in betting environments.
👉 Read SumSub's discussion of World Cup betting fraud and integrity controls →
World Cup betting fraud: are siloed identity controls keeping up?
Explore further
Major sporting events expose a trust-boundary failure, not just a fraud spike. The issue is not that betting activity rises; it is that account creation, verification, and monitoring are forced to operate at event speed while identity fragments across operators and jurisdictions. That creates a governance gap where the same actor can present as many actors. Practitioners should treat event surges as a stress test for identity correlation, not a temporary increase in volume.
A few things that frame the scale:
- 92% of organisations expose NHIs to third parties, raising concerns about supply chain security, according to the Ultimate Guide to NHIs.
- 92% of organisations expose NHIs to third parties, which is why shared identity signals matter when fraud crosses operator boundaries.
A question worth separating out:
Q: Who is accountable when betting fraud spreads across operators and regulators?
A: Accountability has to be shared but explicit. Each participant owns its local controls, but no single operator can claim end-to-end visibility in a fragmented market. The practical answer is pre-agreed escalation, evidence sharing, and defined decision rights before peak events begin.
👉 Read our full editorial: World Cup betting fraud exposes the limits of siloed identity controls