Mobile Gambling - Sportsbooks Face Growing Fraud

The sports betting industry has seen rapid digitalisation as punters increasingly use mobile devices as their go-to method of betting. However, their convenience, especially in live betting scenarios, exposes the industry to significant fraudulent activities.

Mobile betting remains the dominant method of online gambling in the UK. This is particularly true for younger people, with three quarters of 18-34 year old online gamblers using a smartphone to gamble compared to only 14% of those aged 65 and over (according to the The Gambling Commission.)

This large audience makes it more likely that fraudsters will target sportsbooks, making it crucial for them to have a strategy in place for protecting bettors from fraud.

Non-genuine engagement and fraudulent activity is happening completely undetected, siphoning away campaign margins from sportsbooks and hindering growth.  Guarding against this fraud not only ensures campaigns reach their maximum potential, but also helps protect brand reputation. By taking a proactive stance, sportsbooks can prevent further funds from flowing through to fraud.

Mounting Digital Threats

The mobile betting market is set to expand considerably over the next few years, with Market Research Future estimating the market size will reach $173.87 billion in 2032. This growth will further incentivise fraudsters to target the industry.

These fraudsters use invalid traffic (IVT) to exploit sportsbooks’ advertising campaigns with concerning levels of success. IVT consists of any activity originating from sources lacking genuine user interest. This includes ad fraud carried out by threat actors, typically by using bots. This adversely affects sportsbooks by artificially inflating impressions, so mobile advertising campaigns appear to be performing much better than they actually are. Not only does this waste ad spend for Sportsbooks, it also misleads them with fundamentally flawed campaign data on which they make future ad spend decisions. 

Artificial Intelligence (AI) powered bots are also used by fraudsters regularly to create and carry out frequent attacks. These bots create masses of fake accounts, inflating campaign data and abusing sportsbook’s promotions. This significantly drains campaign resources, and our research shows on average around 5-7% of sports betting campaigns are affected.

Conventional anti-fraud tools deployed on mobiles don’t operate at the impression or click level, and therefore fail to identify IVT, leaving sportsbooks vulnerable to threats.

Non-genuine engagement from returning users also poses a challenge for sportsbooks, as loyal customers unintentionally drive-up costs. When these users attempt to navigate back to a website, they can end up clicking on paid brand advertisements. This inflates customer acquisition costs (CACs), and as these existing users won't generate new conversions, the sportsbook faces a loss. Without a strategy to manage their traffic and control non-genuine engagement, sportsbooks will continue to be vulnerable to fraud and optimising their campaign value will be even more difficult.

Being Proactive In The Fight Against Fraud

To adapt to an evolving market, sportsbooks must embrace mobile betting. As most anti-fraud tools on mobiles lack the ability to identify more sophisticated threat methods, it’s crucial to develop a strategy to augment this vulnerability. This way sportsbooks can then reap the benefits of the mobile betting industry while protecting themselves and their users.

Here are some of the steps sportsbooks can take to mitigate campaign losses:

Traffic Monitoring:  The biggest advantage fraudsters leverage is IVT’s ability to pass through systems unnoticed. It’s possible to circumvent this by regularly monitoring traffic. This provides valuable insights into campaign data, and sportsbooks can discover any indicators that fraudulent activity is occurring. This can then be swiftly dealt with and the threat to margins will be removed.

Install an Ad-Verification Platform:  Bots can be deployed in overwhelming numbers, making it increasingly challenging for teams to effectively monitor their traffic. To ensure fraudulent traffic doesn’t slip through the cracks, an ad-verification platform can be utilised to boost operational efficiency. These platforms can determine if traffic is legitimate by identifying its source in real time. Suspicious traffic can then be blocked, mitigating any threat to budgets.

Set Custom Verification Rules:  To control the number of times a user interacts with a campaign, sportsbooks can set custom verification rules. This limits the number of times a particular user can click on an ad as once they pass the set threshold, they’ll no longer see the advertisement. This prevents bots or other non-genuine forms of engagement from repeatedly attempting to engage with an ad. The result is significantly reduced cost-per-click (CPC) rates and budgets protected from bot spam.

Staying Ahead Of Fraudsters

As the digital landscape continues to develop, fraud tactics are evolving, becoming increasingly complex to both identify and mitigate. If sportsbooks want to successfully reap the benefits of a booming mobile betting market, they have to ensure they’ve taken the right steps to protect themselves first.

Monitoring and verifying traffic can help prevent fraudulent activity from passing through systems and impacting budgets. With full transparency into their data, sportsbooks can make sure they are the only ones that get to enjoy their margins.

Elie Shuggi is CPO at  TrafficGuard

Image: Ideogram

You Might Also Read: 

Open Banking, Security, APIs & Mobile Apps:

DIRECTORY OF SUPPLIERS - Fraud Detection & Prevention:

__________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

 

« LockBit Resurrection
Stolen NHS Data Published On The Dark Web »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Bundesdruckerei

Bundesdruckerei

Bundesdruckerei specializes in secure identity technologies and services for protecting sensitive data, communications and infrastructures.

Capita

Capita

Capita is a consulting, digital services and software business, providing end-to-end enterprise IT services and solutions focused around digital transformation and innovation.

VigiTrust

VigiTrust

VigiTrust is a security firm specializing in cloud based eLearning programs, security compliance portals and providing security assessments.

Tecnalia Research & Innovation

Tecnalia Research & Innovation

Tecnalia is the largest center of applied research and technological development in Spain, a benchmark in Europe and a member of the Basque Research and Technology Alliance.

Granted Consultancy

Granted Consultancy

Granted Consultancy is a business consultancy that specialises in securing funding to support companies with the development and commercialisation of new and innovative products and technologies.

Clario Tech

Clario Tech

Clario is a simple, comprehensive, personalized protection app. It comes with a full suite of intelligent security software and intelligent people to help you live a better, safer digital life.

SecZetta

SecZetta

SecZetta provides third-party identity risk solutions that are easy to use, and purpose built to help organizations execute risk-based identity access and lifecycle strategies.

EYE Security

EYE Security

EYE provides enterprise-grade cyber security services and cyber insurance to SMEs in Europe, Cyber Incident Response and strategic advice in board rooms.

Let's Encrypt

Let's Encrypt

Let’s Encrypt is a free, automated, and open digital certificate authority, run for the public’s benefit. It is a service provided by the Internet Security Research Group (ISRG).

AnaVation

AnaVation

AnaVation is a trusted partner delivering high-value, cost-effective solutions that solve the most complex technical and analytical problems for our customers.

Punk Security

Punk Security

Punk Security are specialists in integrating security into DevOps pipelines, enabling rapid and secure development.

Sify Technologies

Sify Technologies

Sify is the largest ICT service provider, systems integrator, and all-in-one network solutions company on the Indian subcontinent.

Custard Technical Services

Custard Technical Services

Custard provide Network Security for all types of businesses across many industries, helping to keep them safe and secure.

V3 Cybersecurity

V3 Cybersecurity

V3 Cybersecurity is a unique company focused on contextualization of security programs from a business perspective. Our mission is to provide enterprise IT Risk Management capabilities.

Closed Door Security

Closed Door Security

Closed Door Security is the only cybersecurity team in the north of Scotland offering everything from IASME Certification to CREST-Accredited penetration testing.

Realm.Security

Realm.Security

Realm.Security is pioneering the creation of an easy-to-implement, simple-to-use security fabric solution that is purpose-built for cybersecurity.