Suspicious iGaming Transactions Jumped 4.5x in a Year as AI Rewrites the Fraud Playbook

Suspicious transaction volumes in online gambling rose 4.5 times between early 2025 and early 2026, according to a report from identity-verification firm Sumsub, and the money behind each attempt is climbing with it. The average value of a flagged transaction went from $3,960 to roughly $6,500 over the same window, a sign that fraudsters are chasing larger payouts rather than spraying low-value attempts. The overall rate of fraudulent verification attempts reached 1.53% in the first quarter of 2026, an 18% increase year over year. That share reads small until it is multiplied across the millions of sign-ups that flow through global betting and casino platforms each quarter.

The character of the fraud has shifted as much as the volume. Sumsub's data show fraudulent users now take more than four times longer to complete identity checks than legitimate players do. That is the opposite of the fast, bot-driven pattern operators were trained to spot. Bad actors are working slowly and deliberately, retrying and tuning each submission until a manipulated identity clears review. Artificial intelligence is what makes that patience affordable: fraud networks use generative tools to build synthetic identities, alter documents, and produce realistic faces at a volume that can swamp automated defenses and human reviewers even when any single attempt is mediocre.

The numbers behind the spike

The headline rate masks wide regional gaps. Africa carries the highest prevalence of fraud among the four regions Sumsub tracks, while North America records the lowest. Lower frequency does not mean lower danger. In mature markets, fraud tends to be more sophisticated and harder to catch, leaning on deepfakes and carefully constructed identities rather than crude forgeries. European fraud levels have stayed fairly stable while the attacks behind them grow more technical, and Latin America has seen fraud rise, with fake proof-of-address documents becoming a routine tactic. Sumsub's earlier data put Brazil's deepfake incidence at roughly five times the U.S. rate and ten times Germany's.

The AI tooling shows up across more than just identity documents. In a Sumsub operator survey, about 83% of iGaming firms reported a rise in fraud over the prior year, and 78% encountered growth in AI-generated fake documents specifically. Operators ranked identity fraud and money laundering as their top problems, each cited by 64.8%, followed closely by bonus abuse at 63.8%. Account takeovers trailed at 23.8%. The deposit stage drew the most fraud at 41.9% of incidents, ahead of onboarding at 23.8% and withdrawals at 22.9%, which means the costliest moment is often after a player is already through the front door.

Why operators and affiliates should care

For operators the math is direct. Industry estimates put iGaming fraud losses near $1.3 billion in 2024, and that sits against an online gambling channel worth roughly $293 billion in gross gaming revenue that year and forecast by H2 Gambling Capital to reach about $530 billion by 2030. Fraud at 1.5% of verification attempts is a tax on growth, and it lands hardest on the compliance and payments functions that affiliates rarely see but ultimately depend on. Higher verification friction lowers conversion, and every false positive is a real depositor turned away at signup. The same AI that forges a passport also scales bonus abuse and multi-accounting, the exact behaviors that inflate an affiliate's reported registrations while delivering players who never become profitable.

The regulatory downside is documented, not hypothetical. In 2025 Lithuania's regulator fined Olympic Casino Group Baltija 8.4 million euros (about $9.2 million) after a former fund manager at private equity firm BaltCap gambled millions in stolen money through its venues. Regulators found the operator had not gathered adequate source-of-funds information, had assigned the client too low a risk level at onboarding, and had failed to monitor or flag the suspicious play. Gambling fines worldwide totaled at least $184.8 million in 2025, and source-of-funds and KYC failures recur across them. The pattern echoes enforcement seen when regulators named fake-licence casinos and when scam operators exploited hijacked sites for black-market SEO, both cases where weak verification let bad actors reach players.

Sumsub's stated conclusion is that single-layer checks no longer hold. "The key to winning on both fronts is speed and flexibility and a robust fraud prevention system," said Kris Galloway, the firm's Head of iGaming Product, framing the trade-off operators face between catching fraud and keeping legitimate sign-ups fast. The fix the report points to is behavioral monitoring across the full customer journey, not a one-time gate at registration. That is a heavier compliance bill, and it arrives as loosely regulated and offshore markets, including those that have drawn scrutiny over Curacao crypto-gambling rules, become magnets for the cheapest synthetic identities. The next twelve months will test whether layered verification can scale faster than the AI generating the fakes: suspicious volumes already quadrupled in one year, and the average flagged transaction is now worth $6,500.