SHARE

June 03, 2026

Fraud in gaming is now a network problem

Tom Hill Headshot

Tom Hill
Head of Gaming and Prediction Markets


Digital identity is a cat and mouse game. And right now, the mouse is winning.

Three forces are reshaping how gaming operators handle identity. Players moved aggressively to multi-homing. Prediction markets opened a new front on the same player base. AI evolution made cross-operator fraud cheaper to scale. Most stacks haven't caught up. Identity in gaming used to be a per-operator problem. It isn't anymore.

Players multi-home. Operator stacks still assume they don't.

The engaged US gaming user now holds accounts at multiple platforms. A sportsbook, an iGaming brand, a DFS app, a sweepstakes site, and increasingly a prediction market on top. They shop odds across platforms. They chase promos across categories. They switch in-session.

At each new operator, the same legitimate player goes through the onboarding flow, re-registers, re-links a bank, re-uploads documents. Each new sign-up is treated as a blank slate. Is this person a VIP comfortably suited for high limits and frequency, a known fraudster, or somewhere in between? The operator has no way to know. The same person, treated as a stranger every time they cross a platform boundary.

That friction has a cost. More than half of Americans (58%) have already abandoned a financial app because it couldn't sync with their bank. When onboarding breaks, legitimate players bail. 

This is a CAC and retention problem before it's a fraud problem. Operators pay full acquisition cost for players the category has already converted, and the cost compounds with every product launch and every new market. As US OSB matures and acquisition costs climb, that compounding loss is becoming the most expensive blind spot in the gaming operator's economics.

The player is the same. The infrastructure to recognize them isn't.

Prediction markets opened a new regulatory front on the same player base

Prediction markets added another identity seam. Kalshi, Polymarket, Robinhood, DraftKings Predictions, and major gaming brands are pulling players into products that sit beside traditional sportsbooks but operate under different regulatory regimes.

That split matters for identity. Prediction markets operate under CFTC federal oversight, while sportsbooks follow state-by-state OSB rules. Different rule books mean different KYC standards, AML thresholds, verification flows, and reporting obligations. Same players. Same fraud actors. More seams to exploit. 

Players and fraud actors now move across regimes. The defense needs to move with them, with the behavioral, device, and IP signals that catch fraud and follow the actor.

AI made cross-operator fraud cheap to scale

Organized fraud rings have always coordinated across operators, and the unit economics used to make it expensive. AI changed the math. The cost to commit fraud dropped sharply. The procurement and compliance cycles that constrain defenders haven't.

The stakes are large. Global fraud losses are projected to reach $40 billion within the next few years, driven in large part by AI-enabled attacks.

In gaming, the cost asymmetry plays out across the network. Fraudsters cycle through identity and device combinations at multiple operators simultaneously, evading detection. AI-generated documents look more convincing than ever and can bypass simple KYC checks. Bot-coordinated account behavior runs across platforms in parallel. Synthetic identity rings that took weeks to spin up in 2022 are provisioned in hours.

Per-operator stacks see one slice and file it under background loss. A network-level view sees the same signature, the same timing, multiple platforms. The signal is loud if anyone is looking at the right altitude.

What a modern gaming identity stack should include

Most identity stacks were built in layers: KYC, device intelligence, behavioral analytics, transaction monitoring. Each layer is useful. But none is enough on its own, especially when fraud moves across operators. The missing anchor is the bank account: a persistent, permissioned signal tied to real financial history.

A modern gaming identity stack needs four things working together.

1. Adaptive risk decisioning across the network. No single operator stack sees the full picture of fraud. A risk engine grounded in cross-network behavioral and device patterns catches what individual stacks miss.

2. Bank-account ownership and history as the cross-operator anchor. Documents can be deepfaked. Devices can be spoofed. A real, funded, consumer-permissioned bank account tied to longitudinal financial history with real transaction patterns is structurally hard to fake at scale. It is the foundational authenticity signal that survives where document and device signals fail.

3. Risk signal at every moment, not just at sign-up. Registration, deposit, and re-verification, each moment requires its own decision. The behavioral and bank account signals captured at registration continue to inform decisions long after.

4. Defense-in-depth across the verification stack. No single check stops AI-driven fraud. Defenses need to layer at every stage of identity verification: capture, detection, verification, and decisioning. When fraudsters cycle through one stage to bypass it, the next stage catches them. A layered defense can entail virtual camera detection for manipulated images and facial duplicate detection or DMV checks to combat synthetic identity fraud. 

Where Plaid fits

Plaid helps gaming operators make better identity and risk decisions across the player journey: onboarding, deposit, re-verification, and fraud detection.

Plaid's network spans the financial ecosystem — more than 9,000 apps and clients across 12,000+ financial institutions, with 1 in 2 American adults using Plaid. That scale gives operators broader signals across bank accounts, devices, and account behavior, without requiring operators to share data with one another.

Across the player journey, that looks like:

  • Player onboarding: One-click identity information onboarding and bank authentication at registration for players already in the Plaid network. Identity verification step-ups (document verification, liveness) trigger when higher risk is detected.

  • Deposit risk: Real-time transaction risk scoring at funding, with optional ACH return guarantee for risk-immature programs.

  • Returning player verification: Confirming the operator’s returning players (including dormant accounts and ATO defense) against linked bank-account ownership information.

  • Network fraud detection: Cross-platform fraud signatures the individual operator can't see in its own data.

Plaid's solutions span regulated gaming — sportsbooks, DFS, online poker, horse racing — and prediction markets. The same fraud infrastructure operates at each one.

What good looks like in 2026

The operators winning in 2026 will be the ones that stop treating identity as a one-time compliance check and start treating it as infrastructure across the player journey.

That means matching friction to risk at onboarding, reducing unnecessary friction at deposit, and detecting fraud patterns individual operators cannot see on their own. The same network that helps legitimate players onboard faster also catches fraud rings earlier. 

Network-grounded signals reduce fraud loss. For gaming operators, those are no longer separate problems. They are two sides of the same infrastructure decision.

The operators that modernize now will be better positioned for the next wave of product expansion, regulatory scrutiny, and AI-enabled fraud.

Learn how Plaid helps gaming operators win with faster, more secure identity and fraud prevention.