A federal grand jury has indicted two men for a $3 million identity-theft scheme targeting FanDuel, Ontario's gaming regulator has fined two iGaming content suppliers for exposure on unlicensed platforms, and governments from Indonesia to Spain are escalating enforcement action against unregulated online gambling operators.
Two men from Glastonbury, Connecticut — Amitoj Kapoor, 29, and Sidharth Lillaney, 29 — were arrested following a federal grand jury indictment carrying 45 counts, including conspiracy, wire fraud, identity fraud, and money laundering. The charges stem from a scheme in which the pair allegedly used stolen personal identities to register new accounts on FanDuel and claim new-user promotional bonuses repeatedly, defrauding the operator of approximately $3 million.
The investigation was a joint effort between the Connecticut Department of Consumer Protection's Gaming Division and IRS investigators. Prosecutors allege that Kapoor and Lillaney systematically obtained stolen identity credentials, used them to create accounts that appeared to be legitimate first-time users, and then collected sign-up bonuses before withdrawing funds or cycling them through additional accounts.
Operator takeaway: New-user bonus fraud via synthetic or stolen identities continues to be among the highest-return schemes targeting regulated sportsbooks. Velocity checks on document reuse, device fingerprinting, and behavioral profiling at registration are essential controls — KYC alone is insufficient when fraudsters present genuine stolen credentials.
Ontario's Alcohol and Gaming Commission (AGCO) fined two iGaming content suppliers — Relax Gaming Ltd. and Arrise Solutions Ltd. — CAD $40,000 each after finding their game content available on gambling platforms accessible to Ontario players but operating without a provincial licence. The enforcement actions were announced on May 8, 2026.
Under Ontario's iGaming framework, licensed game suppliers are prohibited from distributing content to operators that have not been approved by the AGCO to serve Ontario residents. The regulator has consistently maintained that responsibility for market access control extends to suppliers, not only operators. Both companies cooperated with the investigation.
The enforcement action follows a pattern of AGCO scrutiny on the supply chain of unregulated gambling. Earlier rulings resulted in similar fines for content distributed to grey-market operators, signaling that Ontario intends to hold technology providers accountable alongside platform operators.
Indonesian authorities arrested more than 300 foreign nationals in a large-scale raid on an alleged online gambling operation based in Jakarta. The sweep, described by officials as one of the country's largest crackdowns on illegal digital betting networks, targeted a facility running online gambling services directed at overseas markets.
The arrests coincide with Indonesia blocking access to the prediction-market platform Polymarket on May 22, 2026, citing violations of the country's online money gaming laws. India's Ministry of Electronics and Information Technology issued a similar blocking order against Polymarket one day earlier, on May 21, classifying it as prohibited online gaming under existing legislation.
Spain's gambling regulator, the DGOJ, also ordered internet service providers to block Polymarket and U.S.-based Kalshi for operating without Spanish gambling licences, joining the Netherlands, Belgium, Indonesia, and India in restricting both platforms. The coordinated actions signal an emerging international consensus that prediction markets and other novel digital wagering products are subject to existing gambling licensing frameworks regardless of how their operators categorise them.
State-level enforcement against sweepstakes casino operators is intensifying across the United States. California's AB 831 bans sweepstakes casinos outright and extends liability to third-party vendors that facilitate their operation. Mississippi, Iowa, and Oklahoma have each enacted legislation specifically targeting the sweepstakes gaming model, and Illinois regulators ordered 65 sweepstakes operators to block residents or face civil and criminal penalties.
Three additional platforms — LuckyStars, OnPoint Casino, and Turbo Stakes Casino — announced permanent closures in the face of mounting legal risk. The wave of closures reflects how rapidly the legal environment has shifted in 2026 following years of relatively limited enforcement against the sweepstakes model, which allowed operators to offer casino-style gameplay by denominating virtual currency as non-cash prizes.
For licensed operators, the collapse of the sweepstakes sector may redirect some player demand toward regulated platforms — but it also raises the risk of displaced players seeking out grey-market and fully unlicensed sites, a dynamic fraud teams will need to factor into acquisition and behavioral monitoring strategies.
This week's enforcement landscape illustrates the multi-front pressure iGaming operators and their supply chains face in 2026: criminal prosecution of sophisticated bonus fraud rings, supply-chain accountability from licensing regulators, coordinated international action against unlicensed platforms, and rapid legislative change sweeping away previously tolerated business models. For compliance and fraud teams, each of these developments carries direct operational implications — from tightening new-user verification to auditing distribution partner agreements and monitoring regulatory shifts in markets where player traffic originates.
Book a free 30-minute call to discuss what forensic investigation might reveal on your platform.
Book a Free Consultation →