for early access to the latest igaming videos!
and get the latest igaming news first!
A surge in AI-powered phishing has turned New Zealand’s online casino industry into one of the latest battlegrounds in the fight between cybercriminals and security technology.
Research cited by industry and academic studies points to a dramatic increase in sophisticated phishing campaigns since the arrival of generative AI. Data published through ScienceDirect links the spread of large language models to a 4,151% rise in AI-assisted phishing activity, while billions of phishing emails continue circulating globally every day. The scale of the increase has forced online gambling operators to rethink how they protect customer accounts and financial transactions.
The shift is particularly significant for casinos, where every login, deposit and withdrawal creates an opportunity for attackers looking to steal money or personal data.
AI Makes Fraud More Convincing
Traditional phishing emails were often easy to spot. That advantage is fading.
Modern AI tools can generate convincing messages in multiple languages, adapt wording to different audiences and even imitate local cultural references. Researchers from the University of Auckland found that more than one-third of participants admitted clicking on phishing messages tailored to their cultural background, illustrating how personalization has made scams far more effective.
Security researchers have also warned about polymorphic phishing, in which malicious content constantly changes its appearance to evade conventional filters. Static blacklists and rule-based detection systems struggle to keep pace with attacks that are rewritten automatically before each message is delivered.
For online casinos, that presents a costly problem. Customer accounts often contain payment information, identity details, loyalty rewards and transaction histories in a single place, making them attractive targets for cybercriminals.
Casinos Shift From Reactive Security to Predictive AI
Rather than relying solely on older security tools, many operators are investing in systems designed to detect suspicious behaviour before fraud succeeds.
Machine learning models now monitor player activity in real time, searching for unusual login patterns, abnormal withdrawals or device changes that could indicate an account takeover. Biometric authentication, including facial recognition and fingerprint verification, is becoming increasingly common to confirm that the person accessing an account is the legitimate user.
Behavioural analytics adds another layer of protection by identifying signs that are difficult for automated software to imitate. Mouse movements, typing patterns, device fingerprints and geographic inconsistencies can all reveal whether an account is being controlled by a human or by a bot.
These tools are also being used to combat bonus abuse. Referral and promotional offers remain popular across the industry, but AI-generated fake identities and automated accounts have made it easier for fraudsters to repeatedly exploit reward systems. Operators increasingly rely on behavioural analysis to distinguish genuine players from coordinated bot networks.
Regulation Is Catching Up
Technology is only one part of the response.
New Zealand’s proposed Online Casino Gambling Bill is expected to require licensed operators to demonstrate stronger cybersecurity and consumer protection measures alongside existing responsible gambling controls. Companies already using AI-driven fraud detection, transaction monitoring and identity verification are likely to be better positioned as regulatory requirements become more demanding.
The wider challenge extends beyond gambling. As AI-powered attacks grow more sophisticated, demand for cybersecurity specialists continues to rise, leaving casino operators competing with banks, fintech firms and government agencies for experienced talent.
The contest between attackers and defenders is becoming increasingly automated. Cybercriminals are using artificial intelligence to produce more convincing scams, while casinos are deploying their own AI systems to identify threats in milliseconds, long before suspicious activity reaches a customer’s account.
Source: www.technology.org
