Commercial sports-betting gross gambling revenue
2025 · up 22.6%
Global sports-betting growth, World Cup demand, fraud and the South African market.
Global growth, World Cup demand, South African betting, fraud patterns and practical defence.
Online betting grew quickly as major events brought more players and more fraud pressure
Across the NGB's five-year series, South African bookmaker sports-betting gross gambling revenue rose from R8.178 billion in FY2020/21 to R47.892 billion in FY2024/25. The latest figure is 5.9 times the starting value. In the six provinces covered by the NGB's latest online measure, online betting supplied R44.458 billion. (National Gambling Board, October 2025)
The 2026 FIFA World Cup widened the digital audience across 104 matches and drew 6.81 million spectators, according to FIFA. After the opening match, Cloudflare observed an overall rise in requests to gambling sites, and an operator-data study placed average US group-stage bettors at 119% of its pre-tournament baseline. (FIFA, 20 July 2026) (Cloudflare Radar, 21 July 2026) (Optimove Insights, 15 July 2026)
That rise in digital activity gives fraud teams more account events to screen at the same time. A 2025 global operator survey placed deposits ahead of onboarding and withdrawals as the main stage cited for fraud, and a separate transaction network measured a 76% annual rise in the global gaming and gambling attack rate. (Sumsub, 2025) (LexisNexis Risk Solutions, 26 March 2026)
The South African figures cover licensed bookmaker activity reported by the NGB. Licensed bookmakers may accept online sports and horse-racing bets within the scope of their provincial licences. General online casino gambling falls outside that category. (National Gambling Board, Accessed 30 July 2026)
Gross gambling revenue · FY2024/25
FY2020/21 to FY2024/25
Matches · 48 teams · 2026
Gaming and gambling · 2025 vendor network
Global betting grew as the 2026 tournament brought a fresh wave of digital activity
The word iGaming covers different products from one country to another. US figures in this report cover state-regulated sports betting and internet casino gaming. The European estimate covers the wider gambling market across the EU-27 and United Kingdom, while South African figures use the categories published by the NGB.
US commercial sports-betting gross gambling revenue reached $16.89 billion in 2025, up 22.6% from 2024, with the published total excluding tribal sportsbook revenue and Florida mobile betting. EGBA and H2 Gambling Capital estimated European gambling gross gambling revenue at €123.4 billion in 2024, up 5%. (American Gaming Association, 12 May 2026) (European Gaming and Betting Association and H2 Gambling Capital, 25 March 2025)
Commercial sports-betting gross gambling revenue
2025 · up 22.6%
Total gambling gross gambling revenue
2024 · EGBA/H2 estimate · up 5%
Annual sports-betting turnover monitored
More than 1.5m matches across 80+ sports
Bookmaker sports-betting gross gambling revenue
FY2024/25 · NGB audited statistics
The first 48-team FIFA World Cup comprised 104 matches across 39 days. FIFA reported final attendance of 6,810,966 and expected worldwide engagement to exceed six billion once its final figures were complete. Those figures describe tournament reach. (FIFA, 20 July 2026)
Cloudflare compared tournament traffic with the median from the preceding four weeks. Requests to gambling-industry websites rose overall after the opening game, then settled into a steadier pattern during the near-daily schedule. (Cloudflare Radar, 21 July 2026)
Optimove's group-stage analysis placed average US bettors at 119% of the pre-tournament baseline and first-time depositors at 174%. Bets per player moved to 94% of baseline. Average wager per bettor declined from $266 to $239. The study's wider benchmark averages 3.2 million active US players and 21 million globally each month. (Optimove Insights, 15 July 2026)
48 teams · 11 June to 19 July 2026
FIFA final tournament count
Of pre-tournament baseline · operator network
Of pre-tournament baseline · operator network
Across the wider sports-betting environment, IBIA reported 300 suspicious betting alerts during 2025. Football accounted for 110. Its Africa review recorded 117 alerts on African sporting events from 2021 through 2025. The organisation said wider monitoring coverage contributed to the annual change. (International Betting Integrity Association, 3 February 2026)
The local digital market in this report covers licensed online bookmakers
In this report, the South African online market means betting reported by the NGB through licensed bookmakers. Those bookmakers may accept sports and horse-racing bets online within their approved licence scope. General online casino gambling falls outside the licensed betting category. (National Gambling Board, Accessed 30 July 2026)
Global sections use iGaming as the wider industry term and include fraud methods seen across betting and online casino products.
South African bookmakers licensed for online betting, subject to provincial gambling rules and their licence conditions.
Land-based casino gambling included in the NGB’s audited market statistics.
The global fraud analysis includes online casino methods. South African market figures remain confined to licensed local categories.
Bookmaker sports-betting revenue reached 5.9 times its FY2020/21 level
What gross gambling revenue means. The NGB calculates it by subtracting player winnings from the stakes an operator receives. The figure comes before business costs and taxes. It differs from turnover, profit and fraud loss. (South African Reserve Bank, 2 April 2026)
Bookmaker sports-betting gross gambling revenue rose from R8.178 billion in FY2020/21 to R47.892 billion in FY2024/25. The increase was 485.6%, bringing the latest figure to 5.9 times the starting value. (National Gambling Board, October 2025)
Gross gambling revenue in R billions · South Africa · FY2020/21 to FY2024/25 · source: National Gambling Board
The NGB's wider betting category includes bookmakers and totalisators across sports, horse racing and other events. It reached R51.975 billion in FY2024/25. Casino gross gambling revenue came to R16.646 billion. Across the six provinces in the latest online figure, online betting supplied R44.458 billion, or 85.5% of reported betting revenue. (National Gambling Board, October 2025)
Gross gambling revenue in R billions · FY2020/21 to FY2024/25 · National Gambling Board
| Year | Total betting | Casinos | Published online figure | Online share of betting |
|---|---|---|---|---|
| FY20/21 | R10.610bn | R9.107bn | Not published | Not published |
| FY21/22 | R15.468bn | R13.754bn | Not published | Not published |
| FY22/23 | R23.748bn | R17.342bn | Not published | Not published |
| FY23/24 | R35.909bn | R17.356bn | R28.970bn | 80.7% |
| FY24/25 | R51.975bn | R16.646bn | R44.458bn | 85.5% |
South African law prohibits general online casino gambling. The NGB figures here cover licensed online bookmakers, so the local revenue chart shows betting revenue. Online-casino evidence appears in the global fraud analysis. (National Gambling Board, Accessed 30 July 2026)
Losses reach transactions, promotions, investigations and customer trust
South African public data has yet to provide a complete series of online-betting fraud losses, which leaves each operator to measure confirmed losses, recoveries, chargebacks, bonus write-offs, review time and customer cases from its own records.
Stolen cards, account takeover, disputed deposits, refund abuse and withdrawals to controlled accounts can create direct loss and chargeback cost.
Multi-accounting, fabricated referrals and coordinated bonus abuse waste acquisition spend and distort campaign results.
Weak identity controls, monitoring and case records leave an operator with poor evidence when a fraud event reaches management, a customer dispute or a formal review.
False positives, manual reviews, source-of-funds enquiries, complaints and investigation time increase the cost of serving legitimate players.
Account takeover, identity theft and fraudulent use of payment instruments can lock customers out and expose personal or financial information.
Money-mule activity, match manipulation, illegal platforms and opaque payment flows weaken confidence in the licensed market.
Operators reported the greatest pressure around deposits
In Sumsub's 2025 operator survey, 41.9% of respondents named deposits as the main stage for fraud, followed by onboarding at 23.8%, withdrawals at 22.9% and in-game activity at 11.4%. Each percentage shows the stage a respondent chose as its main fraud problem. (Sumsub, 2025)
Percentage of surveyed operators · global iGaming survey · 2025
| Stage | Common abuse | Control question |
|---|---|---|
| Onboarding | Stolen, synthetic or repeated identity; underage account; mule recruitment | Can the operator establish a real person, a genuine document and a consistent device before activation? |
| Login | Credential stuffing, SIM compromise, session theft and social engineering | Does authentication combine password validity with device, network and behavioural risk? |
| Deposit | Stolen cards, payment-owner mismatch, rapid card testing and third-party funding | Does the named player match the funding instrument and historical account behaviour? |
| Play | Bonus rings, collusion, robotic wagering, match manipulation and low-risk value transfer | Can monitoring connect accounts, devices, bets, timing and counterparties? |
| Withdrawal | Cash-out to a new beneficiary, minimal play, source-of-funds mismatch and account takeover | Does risk step up before payout, and can the operator explain the source and destination of funds? |
Identity, payment and account behaviour meet inside the same player journey
Operators in the survey reported identity fraud, money laundering and bonus abuse at similar rates. An account opened with a stolen identity can receive third-party funds, claim promotions and withdraw money to an account controlled by a mule. (Sumsub, 2025)
Percentage of surveyed operators selecting each threat · multiple responses allowed · 2025
Identity attributes, documents and biometrics are stolen, altered or assembled to create an account that passes weak onboarding checks.
One person or coordinated group controls multiple nominal players to claim promotions, referrals or favourable odds.
A legitimate account is compromised after onboarding, allowing the attacker to change details, deposit, wager or withdraw.
Funding comes from a stolen, third-party or mule-controlled instrument, or payout is redirected to a different beneficiary.
The account places, layers or withdraws criminal proceeds and creates an apparent gambling explanation.
An unlicensed or impersonated betting product collects deposits, identity documents or credentials outside the legal market.
Synthetic volume can overwhelm a fraud team through the queue itself
Automated sign-ups, repeated evidence, AI-generated documents and malicious bots can pile into the same review queue until the work begins to resemble a DDoS attack made from AI slop. The volume consumes screening capacity, slows decisions for legitimate players and makes serious cases harder to find. The studies below measure different parts of that pressure. The practical defence section follows the operator's response from registration through payout. (Sumsub, 2025) (LexisNexis Risk Solutions, 26 March 2026)
LexisNexis analysed more than 116 billion online transactions in 2025 and reported an 8% rise in its global fraud rate. Gaming and gambling sites recorded a 76% rise in attack rate, malicious bot attacks rose 59%, and agentic traffic increased 450% from January to December. The agentic-traffic measure includes legitimate and unknown-intent activity, so it appears here as a traffic measure. (LexisNexis Risk Solutions, 26 March 2026)
Separate identity-verification evidence shows why remote account opening needs more than a selfie. Entrust reports that deepfakes were linked to roughly one in five biometric fraud attempts in its network. iProov reports a 741% annual increase in iOS-targeted injection attacks in its monitored environment. Both figures apply to the named provider networks. (Entrust, 2026) (iProov, 8 April 2026)
NIST's current remote-proofing standard requires controls that raise confidence that media came from a genuine sensor, analysis for manipulation or forgery, authenticated protected channels, testing against attack artefacts and manual review where needed. It places some injection and forged-media cases beyond the reach of biometric comparison and presentation-attack detection alone. (National Institute of Standards and Technology, July 2025)
The main customer channel now carries most of the measured betting revenue
The NGB recorded R44.458 billion in online betting gross gambling revenue across six named provinces in FY2024/25. That equalled 85.5% of reported betting revenue in those provinces. Remote fraud controls now sit inside the main customer channel covered by the data. (National Gambling Board, October 2025)
Stolen details, altered documents and synthetic evidence can reach the operator before a human sees the customer. Trusted capture and source checks raise the quality of the first decision.
Card testing, payment-owner mismatch and third-party deposits can appear soon after sign-up. Identity, device and payment signals need a shared account view.
Bonus rings and mule activity often reuse devices, contact details, payment instruments or referrals. Link analysis turns repeated elements into an investigator lead.
A new beneficiary, recent account recovery or minimal play can change the risk before payout. A step-up check gives the operator fresh evidence at the cash-out point.
The sequence around an event often says more than a single alert
AUSTRAC lists practical account, payment and wagering patterns observed in online betting. The examples come from an Australian regulator and give fraud teams useful patterns to test against local customer journeys. (AUSTRAC, Accessed 30 July 2026)
Multiple or false identities; identity-payment mismatch; shared device, IP address or contact detail; repeated failed logins; rapid profile changes.
Several cards or bank accounts; cardholder mismatch; deposits inconsistent with known income or profile; third-party funding without a clear explanation.
Minimal play before withdrawal; robotic or highly repetitive betting; coordinated opposing positions; patterns inconsistent with ordinary entertainment or stated purpose.
New beneficiary after a credential reset; withdrawal to an account held by a third party; repeated deposit-and-withdraw cycles; urgency after account changes.
Many nominal players linked by device, address, payment instrument, network or promotion; circular referrals; synchronised account creation and wagering.
Dormant account reactivation, unusual hour or geography, source-of-funds inconsistency, adverse information, sanctions match or match-fixing concern.
What to check, when to step up and what the analyst needs to see
Defence follows the account from registration through payout, with a visible signal, an agreed response and a case record that an investigator can reconstruct at each stage. Operators should set the thresholds through their own product rules, licence controls, fraud policy and case procedure. (AUSTRAC, Accessed 30 July 2026)
Verify age and identity, validate document authenticity, compare biometrics where appropriate, and check genuine-sensor and injection signals. Add screening when the operator’s own risk rules call for it.
Link verified identity to contact details, device, session and funding instrument. Detect device emulation, shared infrastructure, cardholder mismatch and repeated identity elements.
Use phishing-resistant or risk-based authentication where feasible; step up on new devices, contact changes, password resets and beneficiary changes; apply recovery controls as strongly as login controls.
Combine deposits, bets, bonuses, linked accounts, play velocity, withdrawals and customer risk. Test for rapid in-and-out movement, collusion, coordinated promotion use and profile inconsistency.
Re-verify high-risk sessions; compare the payout beneficiary with the verified customer; review source of funds where required; route the payout to manual review under a documented policy; preserve the reason and reviewer authority.
Give analysts the full event chain; preserve evidence; classify fraud, integrity, financial-crime and responsible-gambling concerns under the operator’s current process; feed confirmed outcomes into rule and model testing.
| Account moment | Trigger pattern | Immediate action | Evidence to retain |
|---|---|---|---|
| Registration | Reused identity details, document tampering, age mismatch, shared device or weak genuine-sensor confidence. | Pause account activation. Request a fresh capture or authoritative check. Send unresolved cases to trained manual review. | Submitted evidence, source result, device signals, linked-account matches and reviewer reason. |
| Login and recovery | Failed-login burst, unfamiliar device, SIM or contact change, password reset and new beneficiary in one sequence. | Step up authentication. Protect sensitive profile changes with an approved cooling period. Notify the existing verified contact. | Session history, device change, recovery path, notification delivery and final access decision. |
| Deposit and promotion | Payment-owner mismatch, several cards, linked sign-ups, circular referrals or campaign-timed account creation. | Route funding and promotional value to review. Verify payment ownership. Link accounts before a reward becomes withdrawable. | Payment-owner result, promotion terms, device graph, referral chain and review outcome. |
| Wagering | Robotic velocity, coordinated opposing positions, unusual odds selection or behaviour outside the customer profile. | Open a linked fraud and integrity case. Apply approved session controls. Escalate sports-integrity concerns through the operator process. | Bet sequence, odds, timing, related accounts, model output and analyst assessment. |
| Withdrawal | Minimal play before payout, a new beneficiary after recovery, third-party account details or source-of-funds inconsistency. | Step up identity and beneficiary checks. Complete required source-of-funds work. Route the payout to review under the operator policy. | Customer evidence, beneficiary result, transaction path, review authority and release decision. |
| Case closure | Confirmed fraud, integrity concern, linked account network or a control failure that affected customers. | Preserve the full event chain. Route related matters through current operator procedures. Feed confirmed outcomes into control testing. | Case chronology, classification, supporting records, customer communication and remediation owner. |
Track confirmed outcomes, customer friction and case quality
Senior management should be able to read one report and see where confirmed loss occurs, how the risk is changing, what legitimate customers experience and how quickly teams fix control gaps. Alert volume shows the workload, and confirmed case outcomes show whether the controls are finding the right activity.
The sources behind the market figures, fraud findings and practical guidance
The research starts with audited regulator statistics, court records, official guidance and public technical standards. Industry studies fill gaps in the public data. Every figure keeps the dates, place and group of transactions or respondents used by its source.
The global market cards use the currency and definition from each source. AGA compiles US state data, and EGBA works with H2 Gambling Capital on the European estimate. FIFA supplies tournament figures. Cloudflare measures web requests, while Optimove and IBIA report activity from their participating networks.
The South African sports-betting chart uses the NGB's five-year bookmaker series. Online betting values appear for FY2023/24 and FY2024/25, with five named provinces in the first year and six in the second. The five-year growth finding comes from the consistent sports-betting series. The two online values show how much reported betting revenue came through that channel.
Public reporting has yet to provide a complete South African series for online-betting fraud losses or AI-enabled betting fraud. The report leaves out a combined estimate and labels each industry finding with the network or survey that produced it.
VerifyNow can assess identity and fraud controls against an operator's channels, confirmed cases and customer journey.
Request an enterprise assessmentResearch cut-off: 30 July 2026. This report provides general information. Legal, regulatory and financial decisions require current legislation, directives, guidance, licence conditions and advice for the operator's circumstances.