Online gambling operators are caught in an escalating AI-versus-AI battle that's fundamentally reshaping how they detect fraud. While global identity fraud rates dropped from 2.6% in 2024 to 2.2% in 2025, the iGaming industry experienced the opposite trend, with fraud-specific rates climbing to 1.53% in the first quarter of 2026, an 18% year-on-year increase. This paradox reveals a critical shift: fraudsters have abandoned high-volume, low-sophistication attacks in favor of coordinated, AI-driven schemes that are far more damaging to detect and stop.

What Changed in iGaming Fraud Between 2024 and 2026?

The transformation happened fast. In 2024, most iGaming fraud followed a predictable pattern: bots hammered signup forms, bonus hunters created throwaway accounts, and rule-based systems blocked them with velocity checks and IP blocklists. That era ended in 2025. According to Sumsub's Identity Fraud Report 2025-2026, multi-step attacks, which chain together synthetic-identity creation, deepfake verification, bonus abuse and money laundering into a single automated flow, jumped from 10% of all identity fraud in 2024 to 28% in 2025, a 180% year-on-year increase in sophisticated fraud.

The numbers tell a story of redistribution rather than decline. Fraudsters stopped throwing thousands of unsophisticated bots at the wall and started deploying a handful of very smart ones. Sumsub recorded a 4.5-fold increase in suspicious transaction volumes for iGaming between the first quarter of 2025 and the first quarter of 2026, while 82.9% of operators surveyed said fraud had increased over the prior year. Deepfake fraud rose 700% globally between the first quarter of 2024 and the first quarter of 2025 and now accounts for roughly 11% of first-party fraud, with Europe experiencing the highest concentration at 41% of all fraud attempts.

How Are Operators Defending Against AI-Powered Fraud?

Defense technology has evolved through four distinct eras, each responding to increasingly sophisticated threats. Understanding this progression reveals why operators are now consolidating their fraud-detection stacks and investing heavily in new approaches.

• Static Rules (Pre-2023): Hand-written rules blocked specific IP ranges, flagged deposits above thresholds, and rejected accounts sharing a device. These were cheap and explainable but brittle, as fraudsters simply probed the boundaries until they found gaps.
• Supervised Machine Learning (2023-2024): Models learned fraud patterns from labeled historical data, a significant leap forward. However, supervised models share a fatal flaw: they need examples of fraud they have already seen, leaving them blind to novel attack chains.
• Graph Machine Learning (2026 Baseline): Instead of scoring accounts in isolation, graph machine learning maps relationships across accounts, transactions, devices and behavioral signals to expose hidden fraud rings. Vendors including SEON, Sumsub and Sardine rebuilt their architectures around graph analytics because multi-accounting and bonus abuse via networks of synthetic identities are relationship problems, not single-account problems.
• Continuous Behavioral Intelligence: The newest layer involves persistent monitoring that scores every session action in real time and updates a player's risk profile dynamically. Behavioral biometrics, including how a user types, swipes, holds a device and navigates a betting slip, now supplement document checks because behavior is far harder for a generative model to fake convincingly.

This technological evolution reflects a fundamental shift in how operators think about risk. When an operator can face a £10 million fine over anti-money-laundering (AML) failures, the calculus shifts from "cheapest tool" to "most defensible stack." Buyers increasingly want vendors who can demonstrate model governance, auditability and explainability to regulators, capabilities that favor larger, better-capitalized platforms over smaller startups.

"The Sophistication Shift marks a turning point, as businesses now face challenges tied to their velocity: the speed at which they can detect threats and adapt," said Andrew Sever, co-founder and CEO of Sumsub.

Andrew Sever, Co-founder and CEO at Sumsub

In practice, velocity is now the entire game. A fraud ring that can generate a fake ID, pass a deepfake liveness check and mimic human betting behavior in seconds forces operators to make risk decisions in milliseconds, a demand no rule table can satisfy.

How Big Is the iGaming Fraud-Detection Market?

The economics of defense have followed the threat trajectory. The market for AI-powered fraud detection across sports betting and iGaming was valued at $1,495.9 million in 2025 and is forecast to reach $14,731.8 million by 2035, a compound annual growth rate close to 25%. On that trajectory, the segment is on track to clear roughly $1.9 billion in 2026 alone.

Two structural facts define how operators spend their fraud-detection budgets. End-to-end platforms, which bundle onboarding know-your-customer (KYC) verification, transaction monitoring, device intelligence and case management, account for 57.6% of spend as operators consolidate point solutions into single vendors. Cloud deployment dominates at 84.8%, reflecting an industry that needs to push model updates continuously rather than ship quarterly software releases. This consolidation is not merely academic; it reflects a regulatory environment where the cost of failure has become prohibitively high.

What Are the Emerging Threat Vectors?

Payment-method fraud has become the dominant threat vector in 2025, surpassing document fraud for the first time as attackers pivoted from faking identities to compromising the money rails themselves. Synthetic identity document fraud climbed 195% globally and 300% in the United States, as generative tools made a convincing fake passport a commodity rather than a craft. These shifts suggest that as operators improve their ability to detect fake documents, fraudsters are simply moving to different attack surfaces.

The iGaming industry is uniquely exposed to these threats because it combines instant money movement, generous promotions and a global, often pseudonymous user base, exactly the surface autonomous fraud agents are built to exploit. The result is an industry in transition, where the old playbook of blocking bots and flagging anomalies no longer works, and where the next generation of fraud defense must operate at machine speed to keep pace with machine-driven attacks.

" }