Solutions

Same graph engine. Different fraud on every vertical.

Bonus abuse and fraud don't look the same from one gaming vertical to the next — the mechanics of the promo change what's worth exploiting. Below is how each pattern actually shows up, and what in the identity graph catches it.

Sweepstakes

Gold Coin & Sweeps Coin platforms

Sweepstakes-model platforms give away free Gold Coins for play and separately award Sweeps Coins that can be redeemed for cash or prizes without a purchase. That "free to enter, real prize" structure is exactly what draws multi-accounting: every new account is a fresh allotment of Sweeps Coins, and unlike a deposit-funded casino account, there's no payment friction stopping someone from opening a dozen of them.

In practice, this shows up as a small number of real operators running many accounts through referral bonuses, daily login bonuses, and no-purchase-necessary mail-in entries, then routing the redemptions to a handful of shared destinations. The individual accounts rarely look suspicious in isolation — each one plays a plausible amount, claims a plausible number of bonuses, and waits a plausible interval before redeeming. The tell is only visible once you connect the accounts to each other.

What we watch for

  • Redemption requests from otherwise-unconnected accounts converging on the same payout method, prepaid card, or mailing address
  • Referral chains that loop back to a small seed set of accounts within two or three hops
  • Daily-bonus claim timing that's synchronized to the second across accounts with no other visible connection
  • Mail-in "alternate method of entry" submissions arriving in batches with near-identical formatting or handwriting patterns
Referral abuseRedemption clusteringMail-in entry fraudDaily-bonus cycling

Further reading: five behavioral tells of Gold Coin farming rings.

iGaming

Casino & sportsbook operators

Licensed iGaming operators compete hard on welcome bonuses and reload offers, which makes bonus economics the main attack surface. The two patterns we see most: bonus cycling, where a group of linked accounts each claim a welcome bonus, satisfy the wagering requirement with minimal-variance bets, and withdraw the residual value; and matched betting, where an abuser backs and lays the same outcome across a bonus account and a linked exchange or sportsbook account to extract close to risk-free value from free-bet promotions.

Affiliate fraud is a distinct third pattern worth calling out separately: an affiliate refers accounts to themselves, or to a small ring they control, to collect CPA payouts on players who were never going to be organic depositors.

What we watch for

  • Minimal-variance bet patterns immediately following a bonus credit, repeated identically across a cluster
  • Opposing bets on the same event placed from accounts sharing a device or payment instrument
  • Affiliate-referred accounts whose device and network fingerprints overlap with the affiliate's own login history
  • Deposit-then-immediate-bonus-claim sequences with no organic play in between, repeated across many "new" accounts
Bonus cyclingMatched bettingAffiliate fraudWagering-requirement gaming

Further reading: bonus abuse vs. fraud — why they need different playbooks.

Skill-gaming

Real-money skill-based platforms

Skill-gaming abuse tends to center on the entry fee and the matchmaking pool rather than a deposit bonus. Smurf accounts — new accounts deliberately built to look like beginners — are used to get matched against genuinely weaker opponents and win disproportionately. Collusion is the inverse problem: two accounts that are actually the same operator or a coordinated pair, "competing" against each other in a way engineered to guarantee one side wins, often to launder entry fees or extract a promotional match bonus.

Entry-fee bonus abuse — opening disposable accounts purely to claim a first-entry-free or deposit-match promotion, playing the minimum required, and abandoning the account — rounds out the pattern set, and is often the highest-volume of the three even though it's the least sophisticated.

What we watch for

  • Win-rate anomalies concentrated against a small set of "opponent" accounts rather than distributed across the matchmaking pool
  • Session timing overlap between paired accounts that's inconsistent with two independent players
  • New accounts whose skill rating trajectory doesn't match typical beginner progression curves
  • Entry-fee promotional claims followed by immediate account inactivity, repeated at volume from related devices
Smurf detectionCollusion detectionEntry-fee abuseMatchmaking manipulation

Further reading: what device fingerprinting still misses in skill-gaming.

DFS

Daily fantasy sports operators

Daily fantasy sports adds a wrinkle the other verticals don't have: information sharing between accounts that are formally "competing" against each other in the same guaranteed prize pool contest. A lineup syndicate — a group of accounts controlled by, or coordinating with, the same operator — can split entries across many overlapping lineups to dramatically increase the odds that at least one of them lands in the money, then share the pooled winnings afterward. That's a different problem from deposit-bonus stacking, where the goal is simply extracting promotional value across linked accounts rather than gaming the contest structure itself.

Multi-entry abuse compounds this in large-field guaranteed prize pool contests, where platform rules typically cap entries per person but a syndicate can exceed that cap by distributing entries across accounts that look, individually, like ordinary single-entry players.

What we watch for

  • Lineup construction that's suspiciously complementary across "unrelated" accounts in the same contest, rather than independently optimized
  • Entry counts per real-world identity that exceed platform caps once accounts are correctly clustered
  • Deposit-bonus claims distributed evenly across a cluster with no corresponding independent play pattern
  • Prize withdrawals from multiple "competing" accounts converging on one payout destination after a contest resolves
Syndicate detectionMulti-entry abuseDeposit stackingLineup correlation

See how the underlying identity graph and scoring engine apply across DFS syndicates.

Not sure which patterns apply to you?

Tell us your vertical and we'll walk through the abuse patterns we typically see.

Talk to us