New SEON Report Reveals Multi-Stage Fraud Exploited Verified Accounts During the World Cup; Operators Who Saw the Full Picture Made the Save
Proprietary Data Shows What the World's Largest Betting & Gaming Operators Detected and Blocked During Marquee
Press Release Disclaimer: This is a press release distributed through the XPR Media network. It has not been independently verified by our newsroom.
Proprietary Data Shows What the World’s Largest Betting & Gaming Operators Detected and Blocked During Marquee Sporting Event
- Detected 83% more fraud from dormant accounts as attackers reactivated profiles that had passed verification months earlier
- Blocked fraudulent withdrawals worth $436 on average, more than double pre-tournament levels ($202), as Attackers concentrated on fewer high-value attempts
- Caught 115% more stolen-credential logins in Europe, timed to match day traffic spikes
AUSTIN, Texas, Aug. 17, 2026 (GLOBE NEWSWIRE) — SEON, the AI command center for fraud prevention and anti-money laundering (AML) compliance, today released findings from its analysis of Betting & Gaming operator data during the 2026 FIFA World Cup that challenges a core assumption regarding fraud expectations during major sporting events. With a tournament of this scale, conventional wisdom indicates that fraud pressure would concentrate at registration, as attackers rush to create fake accounts. While registration volume surged as expected, the most damaging fraud signals appeared downstream, at cash-out.
Representing the largest number of top-tier Betting & Gaming operators and platform providers worldwide, SEON’s data shows that during the World Cup, these organizations deliberately eased sign-up friction, a standard competitive move to avoid losing potential players to rivals, with sign-up block rates falling 16% as a result.
Suspicious withdrawal activity rose in every region measured and climbed 38% compared to the same period in 2025. This climb is attributed to withdrawals flagged for unusual size or timing, such as a single high-value request from an account without prior withdrawal history. The average flagged withdrawal more than doubled in value, from $202 to $436, confirming that attackers shifted from many small attempts to fewer, higher-stake exits.
Dormant account mismatches surged 83% as previously trusted accounts reactivated and moved money
The most telling indicator during the tournament was not a spike in new account fraud. It was dormant accounts, acquired, stolen or curated by fraud rings, reactivating to execute coordinated attacks. Across the network, the daily volume of identity mismatches on dormant, previously trusted accounts surged 83%. In Latin America, that figure reached 118%. These accounts had cleared verification long before the tournament.
When they reappeared on unfamiliar devices, fraudsters immediately attempted high-value withdrawals. Credential-stuffing campaigns surged 115% in Europe over the same window, showcasing that inherited trust was under attack from multiple directions. Operators with visibility across login behavior and transaction activity were positioned to catch it; those monitoring either stage in isolation were not.
Latin America’s synthetic-identity blocks jumped 64% YoY, while every other region fell
While most markets saw registration blocks fall in line with deliberate easing, Latin America saw the opposite. Registration block rates in the region rose by 19%, while synthetic-identity blocks jumped by 34% against baseline and by 64% against the 2025 control. This likely reflects existing controls firing under a volume surge rather than a strategic decision to tighten.
With registration rules always on, a tripled volume automatically drove more blocks. Latin America’s false-positive rate rose sharply during the same window, confirming that the rules faced strain under the load.
The tournament produced a clear regional split: European and North American markets saw pressure shift downstream to the trusted account and cash-out, while Latin America absorbed a registration-stage surge in identity.
57% of operators report fraud losses growing faster than revenue
According to SEON’s 2026 Betting & Gaming Fraud and AML Survey, Scaling Without a Safety Net, 57% of operators report fraud losses growing faster than revenue. Betting & Gaming is the only sector in the study where operators prioritize adding headcount over investing in AI and machine learning (47% versus 34%). That leaves manual teams to absorb fraud that arrives in concentrated bursts during events like the World Cup, when the cost of each missed block is highest.
“The World Cup showed that fraud does not have a fixed target, and that it goes wherever operators’ friction is lowest,” said Tamas Kadar, co-founder and chief executive officer of SEON. “In most markets, operators eased registration to compete for players so attackers moved downstream, reactivating dormant accounts and pushing hard at cash-out. In Latin America, the pressure landed at sign-up instead as a surge in synthetic identities. The operators that caught it in both places had visibility across the full player journey, not just one stage.”
Methodology
The analysis is based on anonymized, aggregated data from SEON’s Betting & Gaming operator customers across all regions. It compares the 2026 FIFA World Cup tournament window (46 days) against a 28-day pre-tournament baseline and a 36-day window covering the same calendar period in 2025. All cross-window comparisons use rates per active user or per 1,000 of the relevant denominator to normalize for volume differences.
About SEON
SEON is the AI command center for real-time fraud prevention and AML compliance, helping thousands of companies worldwide stop fraud, reduce risk and protect revenue. Powered by 900+ real-time, first-party data signals, SEON enriches customer profiles, flags suspicious behavior and streamlines compliance workflows. SEON’s AI detects hidden fraud networks, builds rules, visualizes data and drafts regulatory reports. Teams can also connect their own AI tools directly to SEON’s risk data through a secure integration. With integrated fraud and AML capabilities, SEON operates globally from Austin, London, Budapest and Singapore. Learn more at seon.io.
Media Contact
press@seon.io
