Online Betting Becoming Hotbed Of Digital Fraud, Says TransUnion


Posted on: March 24, 2024, 09:15h. 

Last updated on: March 24, 2024, 09:16h.

Digital scammers are increasingly focusing on internet betting sites and mobile applications with the US being one of the prime jurisdictions for their misdeeds, according to a new study from TransUnion.

FBI cyberattack Scattered Spider MGM Caesars
Online betting sites and mobile apps are increasingly targets of digital fraudsters, according to TransUnion. (Image: FBI)

In its recently published State of Omnichannel Fraud Report, TransUnion noted that overall data breaches surged 15% last year to all-time highs. The research firm added that nearly 14% of all newly created digital accounts are started for the purposes of fraud.

Data breaches are a leading indicator of future fraud as cybercriminals steal credentials in unprecedented numbers,” noted TransUnion. “Now more than ever, knowing the identity of the person you’re dealing with is central to every organization’s fraud prevention strategies.”

The gaming industry has already experienced its share of high-profile cybersecurity issues. Last year, MGM Resorts International and Caesars Entertainment — the two largest operators on the Las Vegas Strip — were targeted by the same groups of hackers. Caesars paid at least $15 million to the cyber bandits while MGM didn’t comply with such demands, but the company incurred a $100 million loss related to the event.

North American iGaming, Sports Betting Sites Targets for Fraud

Internet casino and poker platforms as well as sports wagering sites experienced a noticeable uptick in digital fraud last with much it tied to promotional offers.

“Despite retail’s overall exposure to fraud, gaming (online gambling) experienced the highest rate of suspected fraudulent transactions in 2023 in the most (six) markets analyzed: Colombia, the Dominican Republic, Kenya, Puerto Rico, Spain and the US,” observed TransUnion.

Both land-based and online gaming companies collect large amounts of personal data from clients, making operators desirable targets for cyber criminals and fraudsters. For example, regulated sports wagering mobile apps and websites may require customers to upload government identification and certainly mandate that bettors provide financial information with which to fund accounts. Those items are sought after by fraudsters.

“This early phase new account digital fraud may represent a paradigm shift of sorts among fraudsters,” Steve Yin, senior vice president and global head of fraud solutions at TransUnion, said in a statement. “In lieu of using traditional tactics to gain access to and ultimately compromise existing accounts, they are increasingly choosing to create new accounts that they can control themselves. These fraudsters leverage synthetic identities assembled in large part through the use of credentials gathered as a result of one or multiple data breaches.”

Some online gaming companies have already had run-ins with fraudsters and hackers. In late 2022, DraftKings acknowledged approximately $300,000 was swiped across 68,000 client accounts and that the bad actors likely gained access to clients’ names, addresses, phone numbers, and email addresses along with the last four digits of their payment cards, their account activity, and the date of their last password change.

Gaming Epicenter of Digital Fraud in US in 2023

Of note to bettors and operators alike is the point that in the US, the gaming industry had the highest rate of digital fraud in 2023 at 10.9%. TransUnion pointed out that the percentage refers to the location of the victim at the time the crime was committed.

Puerto Rico — a US territory where several well-known gaming companies offer mobile sports betting — saw gaming account for 10.2% of digital fraud last year.

The top five industries in terms of percentage of digital accounts created for the purposes of fraud are retail, travel and leisure, video gaming, social communities, and betting, according to TransUnion.



Source link

Leave A Reply

Your email address will not be published.