Why cybersecurity is now a board-level issue
For years, cybersecurity in iGaming was treated as a back-office cost, justified only after something went wrong. That view is changing. Operators manage large volumes of player accounts, wallets, bonuses, loyalty points and personal data, and a breach or outage now hits trust and revenue at the same time.
Industry commentators increasingly argue that the test is no longer whether an incident happens, but how quickly and transparently a company responds. The threats below are the ones that come up most often in recent industry reports.
Phishing is rising fast
Phishing remains one of the most common entry points. The 2026 iGaming Trends Report from software provider SOFTSWISS, based on a survey of more than 350 industry professionals, says phishing incidents have increased by 180 per cent since 2023. The same report says 35 per cent of smaller operators describe their cyber resilience as inadequate. These are vendor-published findings, but they point in the same direction as most other commentary.
For players, phishing often takes the form of fake login pages, fraudulent bonus messages or impersonation of support staff. For staff and affiliates, it can mean a compromised email account that leads to changes in payment or data details. Multi-factor authentication and staff training remain basic defences.
DDoS attacks and service disruption
Distributed denial of service (DDoS) attacks are among the most visible threats. They aim to overwhelm a platform until it becomes unavailable, which can stop players logging in during a major event or live tournament. Downtime at a peak moment costs money and damages player confidence, even when no data is stolen.
The response matters as much as prevention. Operators need monitoring that spots attacks early, and clear procedures for keeping core services running while the attack is handled.
AI-driven attacks and deepfakes
Artificial intelligence cuts both ways. Security commentators expect attackers to use AI for convincing phishing messages, automated intrusion attempts and identity-based exploits, including deepfakes. One forecast for 2026 predicts that AI-driven attacks will become mainstream across the sector.
There is a second concern. Attackers are reportedly targeting AI systems themselves, and a compromised tool could be turned into an insider threat. Any operator deploying AI in customer support, fraud detection or marketing should treat those systems as part of its attack surface.
Agentic AI, meaning software that takes initiative rather than only following instructions, adds further uncertainty. Security teams will need to decide how far such tools may act without human approval.
Insider risk and human error
Not every threat is technical. Insider risk covers staff who misuse access, as well as well-meaning employees who click the wrong link or share credentials. The more people and suppliers touch a platform, the more routes an error can take. Access controls, regular reviews and clear reporting routes all reduce that exposure.
Priorities for operators
- Enforce multi-factor authentication on all staff and supplier accounts.
- Test incident response plans, not just write them.
- Review third-party and supplier access on a fixed schedule.
- Train staff to spot phishing and impersonation, including fake supplier invoices.
What affiliates and suppliers should watch
Affiliates and suppliers are part of the same risk picture. Platform partners increasingly demand robust cybersecurity standards and transparent risk management, because a weak link can damage everyone’s reputation. Affiliates should be wary of unsolicited requests for login details, unusual changes to payment information and urgent messages that push for quick action.
Some providers argue for gaming-specific threat intelligence, on the basis that general security tools can miss sector-specific attack patterns. One such vendor claims that over 70 per cent of gaming attack patterns are unique to the sector. That is a sales claim, but it reflects a view that is widely held in the industry.
Compliance and cybersecurity go together
Regulators care about how player data is protected, and the same controls that prevent a breach also support compliance. Logging, access records and documented response procedures make audits easier and help operators show they take their obligations seriously. Treating security as a checkbox misses the point. It should be built into how the business runs day to day.
The bottom line
The 2026 threat picture for iGaming combines familiar risks, such as phishing and DDoS attacks, with newer ones driven by AI and a growing supplier network. The operators best placed to cope will be those that invest in prevention, rehearse their responses and communicate clearly when something goes wrong.
Sign up to the Business of iGaming newsletter to keep up with more coverage of security and technology in the sector.
