Threat intelligence for iGaming platforms
Threat intelligence is only useful if it changes a decision: which control to strengthen, which signal to monitor, which supplier to question. For gambling operators, the most reliable inputs are official advisories, regulator statements and your own incident data, not dramatic headlines or unverified figures.
Sources worth using
| Source | What it offers |
|---|---|
| National cyber agencies (NCSC, CISA, Canadian Centre for Cyber Security) | Advisories, alerts and guidance with clear provenance. |
| ENISA Threat Landscape 2026 | EU-wide view of 8,257 incidents from 1 January to 31 December 2025. Gambling appears only in passing. |
| FATF, Risks of Gaming and Gambling (September 2026) | Money laundering and fraud indicators for online and illegal gambling, including mismatches between customer and payment information. |
| Gambling regulators | Statements, enforcement and technical standards that show what regulators expect. |
| Your own data | Confirmed incidents, fraud cases and attack patterns on your platform. |
| Industry sharing groups and suppliers | Timely indicators; treat as unconfirmed until corroborated. |
From information to action
For each threat, record what it is, where it came from, how confident you are, and which control or monitoring rule it affects. Mapping to shared vocabularies keeps this consistent: OWASP's automated threat IDs for bot abuse (for example OAT-008 Credential Stuffing), the OWASP API Security Top 10 for integrations, and the CSF 2.0 functions for program-level gaps. Our bot mitigation and API security guides show the mapping in practice.
Confidence and provenance
- Label each item with its source and a confidence level.
- Separate confirmed facts from vendor marketing claims and press reports.
- Avoid "live threat" dashboards or figures you cannot trace; they push teams to act on noise.
- Expire intelligence that is no longer relevant.
Sharing
Share indicators with peers and suppliers where contracts and data protection law allow, removing personal data. Report incidents to the national cyber agency where appropriate; in the UK, the NCSC says it does not share incident information with regulators without the victim's permission.
Questions about threat intelligence
Does ENISA report on gambling cyber threats?
Not as a sector. ENISA's Threat Landscape 2026 mentions gambling once: a May 2025 underground forum advertisement for the source code of more than 1,100 gambling websites, which the report says reportedly affected at least 12 EU member states.
What is the FATF gambling report?
Published on 9 September 2026, it is the FATF's first detailed examination of risks associated with online and illegal gambling, with risk indicators such as discrepancies between customer and payment information.
Sources
- ENISA Threat Landscape 2026 (22 September 2026)
- FATF, Risks of Gaming and Gambling, press release of 9 September 2026
- OWASP automated threats and API Security Top 10; NIST CSF 2.0; NCSC incident management
- All sources checked 24 October 2026.