Listen to this Post
In a massive online gambling fraud scheme, two Connecticut men allegedly exploited thousands of stolen identities to defraud platforms like FanDuel, DraftKings, and BetMGM out of $3 million over several years. Authorities say the men, along with accomplices, purchased personal data from darknet markets and Telegram channels, using it to open fraudulent gambling accounts and cash in on promotional bonuses. This case highlights the growing sophistication of identity theft in the digital gambling era.
Massive Fraud Scheme Uncovered
A federal grand jury has indicted 29-year-olds Amitoj Kapoor and Siddharth Lillaney of Glastonbury, Connecticut, on 45 counts of fraud, identity theft, and money laundering. Both men were arrested Thursday and released on $300,000 bond each. Investigators allege that between April 2021 and 2026, the duo used stolen personally identifying information (PII) from roughly 3,000 victims to create thousands of fraudulent gambling accounts.
According to the indictment, Kapoor and Lillaney purchased stolen PII from darknet markets and Telegram channels. They also subscribed to background-check services like TruthFinder and BeenVerified to bypass verification questions on gambling platforms. Kapoor reportedly maintained a “Tracker.xlsx” spreadsheet, organizing victim data including names, addresses, dates of birth, emails, phone numbers, and Social Security numbers. Text messages between the two show how systematically they exploited the stolen data to create new accounts and bypass verification processes.
Prosecutors allege that the scheme focused on leveraging new-user promotional bonuses. Bets placed using these promotional credits often resulted in winnings, which the defendants funneled into virtual stored-value cards, and eventually transferred to their personal bank and investment accounts.
The indictment includes multiple serious charges:
Conspiracy to commit wire and identity fraud (1 count, up to 5 years)
Wire fraud (23 counts, up to 20 years each)
Identity fraud (8 counts, up to 15 years each)
Aggravated identity theft (2 counts, mandatory 2-year consecutive sentence)
Money laundering conspiracy (1 count, up to 20 years)
Money laundering (10 counts, up to 20 years each)
U.S. Attorney David X. Sullivan emphasized the scale of the scheme: “These two men used thousands of stolen identities to open online gambling accounts and exploit new user incentives for years.” IRS Special Agent Thomas Demeo added: “Individuals who commit identity theft of this magnitude deserve to be punished to the fullest extent of the law. The victims suffered immeasurable hardship from this scheme.”
What Undercode Say:
This case exemplifies a troubling evolution in cybercrime targeting the online gambling sector. Identity theft has gone beyond simple phishing scams; criminals now operate highly organized operations resembling corporate structures. Kapoor and Lillaney’s use of spreadsheets to manage thousands of PII records demonstrates a methodical, almost industrial-scale approach to fraud.
The use of background-check subscriptions highlights a new layer of sophistication. Criminals are no longer simply guessing security questions—they’re paying for tools to ensure they can pass verification hurdles with high accuracy. This makes detection by gambling platforms far more challenging.
Promotional bonuses, designed to attract new users, have become an Achilles’ heel for these platforms. Fraudsters exploit these incentives by turning “free bets” into significant sums of stolen money. The introduction of virtual stored-value cards adds another layer of anonymity, making it difficult for regulators and platforms to trace illicit funds.
This scheme also underscores the vulnerability of PII in the digital era. With thousands of stolen identities, the victims face years of potential financial damage, fraudulent activity on other platforms, and personal security risks. Online gambling companies must rethink how they verify user identities and monitor suspicious activity, particularly with the rise of AI-driven fraud detection tools.
The case also raises questions about regulatory oversight. Are current anti-fraud measures sufficient? Should platforms implement mandatory identity verification protocols before offering promotional incentives? Without systemic changes, similar schemes will likely continue.
Cybersecurity awareness for individuals is equally crucial. Victims of identity theft may never know how or where their data is misused. Regular monitoring of credit reports, cautious sharing of personal information, and stronger digital hygiene are essential defenses against large-scale identity exploitation.
Ultimately, this case is a warning: as online gambling and digital financial systems grow, criminals will innovate to exploit loopholes. Industry-wide reforms, combined with robust law enforcement, will be necessary to stay ahead.
Fact Checker Results:
✅ Alleged $3 million fraud aligns with indictment records.
✅ Kapoor and Lillaney were released on $300,000 bond each.
❌ does not clarify if all stolen PII victims have been notified.
Prediction:
🎯 Expect more online gambling platforms to adopt advanced AI fraud detection.
🎯 Increased federal prosecutions for identity-theft-enabled gambling fraud in 2026.
🎯 Likely tighter regulations on promotional bonuses to prevent exploitation by large-scale fraud rings.
If you want, I can also create a visual timeline of their fraud scheme showing how they moved stolen identities to cash, which would make this story even more compelling. Do you want me to do that next?
🕵️📝✔️Let’s dive deep and fact‑check.
References:
Reported By: www.bleepingcomputer.com
Extra Source Hub (Possible Sources for article):
https://www.twitter.com
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
Bing
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon
