3,000 stolen identities and $3m in gambling promos: what the federal case actually alleges
Two Connecticut men face a 45-count federal indictment over an alleged identity-fraud scheme targeting FanDuel and other gambling sites. No guilt is established.
Jump to a section
45 counts · indictment
Large allegations still require proof in court
Connecticut · federal case
Evidence behind the story
What we checked
Primary documents
2 checked
Response record
Response included
Last source check
28 August 2026
Next scheduled review
4 September 2026
Why this matters
The case puts a concrete scale on a hidden KYC problem: promotional abuse can combine stolen identity data, verification-question research and payout instruments. It also shows why allegations against users must not become allegations against the platform.
Procedural status
Federal indictment pending
The defendants have been charged and released on bond. The cited official record does not report a plea, trial verdict, sentence or final loss determination.
The current picture
- A federal grand jury returned a 45-count indictment against Amitoj Kapoor and Siddharth Lillaney on 3 February 2026.
- Prosecutors allege the pair used personal information belonging to thousands of people to exploit new-account gambling promotions, primarily at FanDuel.
- An indictment contains allegations, not evidence of guilt; both defendants are presumed innocent unless proved guilty.
Confirmed by the record
- The defendants were arrested on 5 February and released after court appearances on $300,000 bonds each.
- Charges include alleged wire fraud, identity fraud, aggravated identity theft and money laundering offences.
- The investigation involved IRS Criminal Investigation and the Connecticut Department of Consumer Protection.
- The public case page continues to characterise the matter as an indictment rather than a conviction.
Not established
- The alleged $3m is not a court-ordered restitution or final loss finding.
- The indictment does not establish that every identity produced a funded or successful betting account.
- The official release does not state that FanDuel participated in wrongdoing.
- No conviction, sentence or final forfeiture order is identified on the cited case page.
Sources for each key claim
Evidence map
Each core claim is paired with the document used to substantiate it. Open the record and check our reading.
The federal case consists of a 45-count indictment returned on 3 February against two Connecticut defendants.
Prosecutors allege stolen personal data was used to open gambling accounts and obtain promotional benefits.
The defendants were released on $300,000 bonds and remain presumed innocent.
What changed, and when
3 February 2026
Indictment returned
A federal grand jury in New Haven returns the 45-count indictment.
5 February 2026
Defendants arrested
Both men are arrested and later released on bond after initial appearances.
6 February 2026
Charges announced
The US Attorney's Office publishes the alleged scheme and statutory counts.
24 August 2026
Official case page rechecked
The federal page still presents the matter as a charged case, with no final judgment listed.
The scale is an allegation, not a judgment
The numbers are designed to stop a reader: thousands of identities, millions of dollars and 45 federal counts. They come from a serious public record, but not a final one. A grand-jury indictment alleges that Amitoj Kapoor and Siddharth Lillaney used stolen personal information to defraud online gambling companies, primarily FanDuel, through new-user promotions.
The Justice Department says the alleged scheme involved information belonging to roughly 3,000 people and approximately $3m. Neither figure should be relabelled as a judicial loss finding. The defendants are presumed innocent, and the government must prove the charged conduct beyond a reasonable doubt.
How prosecutors say the accounts were created
According to the indictment summary, personal identifying information was purchased through darknet sources and Telegram. Prosecutors also say background-information services were used to answer verification questions when gambling accounts were opened. That combination turns identity data into something operational: a profile capable of passing parts of an onboarding flow.
The alleged objective was to collect bonuses, credits or bonus bets offered to new customers. If a bonus bet won, prosecutors say winnings could be transferred through a virtual stored-value card linked to an insured financial institution. This is the government's account of the mechanism, not a proven reconstruction.
Why FanDuel appears in the headline
The official release says the alleged activity targeted gambling companies and identifies FanDuel as the primary one. That does not make the operator a defendant or imply that it joined the alleged scheme. In fact, the case can be read as an attack on onboarding and promotional controls rather than misconduct by the platform itself.
Careful attribution matters because a brand name drives search traffic long after procedural caveats disappear. Atlas keeps the verbs attached to their source: prosecutors allege; the indictment charges; the court has not yet found.
The counts do not equal victims or convictions
The 45 counts span conspiracy, wire fraud, identity fraud, aggravated identity theft and money laundering allegations. Counting them is useful for describing exposure, but the number does not mean 45 people were harmed or 45 offences have been proved. Different counts can address different transactions and statutes within one alleged course of conduct.
Potential maximum sentences in a press release are also not forecasts. Sentencing, if there is a conviction, depends on the offences of conviction, guidelines, judicial findings and other factors.
What the case reveals about KYC pressure
Sportsbook verification sits between two competing demands: make onboarding workable for legitimate customers and stop synthetic or stolen identities before money moves. Promotions increase the value of a newly opened account, giving fraud groups a reason to scale identity acquisition even before depositing significant personal funds.
The operational lesson is broader than one operator. Device links, payout destinations, repeated background-check patterns and bonus-conversion behaviour may tell a different story from the identity fields presented at registration. None of those controls is described fully in the public charge.
The next court record matters more than another headline
A plea, trial, superseding indictment or dismissal could narrow, expand or test the government's claims. Restitution and forfeiture records could eventually supply judicially recognised figures different from the approximately $3m in the charging announcement.
Until that happens, the strongest accurate summary is procedural. Two men have been indicted in a major alleged gambling-promotion and identity-fraud scheme; they have not been convicted.
A reusable reporting test
When a criminal gambling story arrives with a famous operator, separate four roles: the accused, the alleged target, the investigator and the court. Then label each money figure by source and legal stage. That prevents a platform from becoming an accused party by headline proximity and prevents an allegation from becoming an accounting fact.
This case remains compelling after those corrections. Its real story is how identity markets and promotional economics allegedly met inside regulated gambling onboarding - and how much still awaits judicial testing.
Response record
The presumption of innocence and indictment-only status are stated prominently. FanDuel is described as an alleged target, not an accused party.
Status: included