Data Breaches

The online gambling industry has evolved from a niche entertainment sector into a global digital ecosystem valued at more than $120 billion, emerging as a critical structural vulnerability within the global financial system. Organised crime syndicates and state-backed hostile actors exploit this ecosystem for money laundering, terrorist financing, and sanctions evasion. The enormous volume of transactions processed through digital casinos, online sports betting platforms, and prediction markets provides an ideal layer of financial opacity.   State-sponsored cyber groups, particularly those linked to North Korea and China, also leverage the sector to generate strategic revenue used to finance sanctioned weapons programmes and collect intelligence through the compromise of sensitive databases containing millions of personal, financial, and biometric records.   Globally, regulatory frameworks governing online gambling remain highly fragmented. Europe has adopted stringent licensing and compliance regimes, while many countries across the Middle East maintain outright prohibitions. This divergence has created regulatory grey zones exploited by offshore operators registered in tax havens such as Malta, Curaçao, and Gibraltar to target restricted markets.   Meanwhile, the Asia-Pacific region faces acute security challenges as transnational organised crime groups control extensive networks of virtual casinos and shadow-banking channels that move billions of dollars through cryptocurrency-based transactions. These parallel financial infrastructures operate across multiple jurisdictions, complicating enforcement efforts and creating new pathways for illicit capital movement.   The implications of this sector extend well beyond financial crime. Online gambling has generated serious social risks, including rising rates of personal bankruptcy and gambling addiction, particularly among minors exposed to gambling-like mechanisms embedded in loot boxes and esports ecosystems. Furthermore, the outflow of foreign currency through offshore gambling platforms contributes to macroeconomic instability in emerging economies while expanding the informal economy, which is estimated to account for between 11% and 20% of global GDP.

For decades, the systems that governments, banks, universities, and public institutions built to verify who someone is rested on a single foundational assumption that personal information, documents, and physical characteristics were difficult to convincingly fake. A Social Security number combined with a date of birth and a driver's license was, for most practical purposes, enough to establish identity.   That assumption has now been broken. The US recorded its highest number of data breaches in 2025 since tracking began, identity theft reports to the Federal Trade Commission rose nearly 20% year over year, and global fraud losses now exceed $534 billion annually. Generative AI, the same technology powering productivity tools and creative applications across the economy, has become a force multiplier for those seeking to deceive digital systems at scale. The speed, sophistication, and accessibility of these tools mean that the problem is no longer confined to the margins of financial crime. It has moved to the centre of a broader question about whether the digital infrastructure modern states depend on to function is as reliable as they have assumed.