GLASTONBURY/ CONNECTICUT: Federal prosecutors say two men from suburban Connecticut quietly exploited the mechanics of online sports betting for years, using stolen identities to open thousands of accounts, harvest promotional bonuses and move millions of dollars through a web of digital payment tools—until the scheme drew the attention of investigators.
A Case Built on Promotions and Stolen Identities
In court filings unsealed in New Haven, federal authorities accuse Amitoj Kapoor, 29, and Siddharth Lillaney, 29, both residents of Glastonbury, Connecticut, of orchestrating a long-running online gambling fraud that primarily targeted FanDuel and other betting platforms. Prosecutors allege the men used the personal information of identity-theft victims to open gambling accounts, focusing on new-user promotions that offer sign-up bonuses, credits and free bets.
According to investigators, the scheme relied on scale. By repeatedly posing as first-time users, the defendants were able to access incentives that are typically limited to one account per person. Each new identity meant another opportunity to place subsidized wagers, turning promotional offers into a steady source of profit.
Kapoor and Lillaney were arrested on February 5 and appeared before U.S. Magistrate Judge Maria E. Garcia in New Haven. The charges stem from activity that prosecutors say began around 2021 and continued for several years.
Certified Cyber Crime Investigator Course Launched by Centre for Police Technology
Buying Data and Beating Verification Checks
To carry out the operation, investigators say, the two men obtained stolen personal identifying information—commonly referred to as PII—belonging to thousands of people across Connecticut and other states. Court documents allege the data was purchased from darknet marketplaces and through the encrypted messaging platform Telegram.
Authorities say the defendants took additional steps to bypass identity verification systems used by gambling companies. Prosecutors allege Kapoor and Lillaney maintained accounts on background-check and data-aggregation websites, including BeenVerified.com and TruthFinder.com, to gather supplemental details about victims. Those details were then used to answer security questions during the account sign-up process, making the fake accounts appear legitimate.
By combining stolen identities with readily available personal data, investigators say the defendants were able to open and operate accounts with little immediate detection.
Moving the Money Through Digital Channels
When bets placed with promotional credits resulted in winnings, prosecutors say the funds did not remain on the betting platforms for long. According to court records, the money was first transferred to virtual stored-value cards that were linked to the gambling accounts and backed by FDIC-insured banks.
From there, authorities allege, the funds were moved into bank and investment accounts controlled by Kapoor and Lillaney. Federal investigators believe this layered approach helped obscure the origin of the money and complicate efforts to trace it back to fraudulent activity.
Prosecutors estimate that the total profits from the scheme amounted to roughly $3 million, derived from the use of personal information belonging to about 3,000 identity-theft victims.
Federal Charges and the Path Ahead
Announcing the charges on February 7, David X. Sullivan, the U.S. attorney for the District of Connecticut, said the case reflects a growing intersection of identity theft, digital platforms and financial crime. He alleged that the defendants used stolen identities to “exploit new user incentives,” allowing them to gamble with funds obtained through fraud.
The indictment includes one count of conspiracy to commit wire fraud and identity fraud, 23 counts of wire fraud, eight counts of identity fraud, two counts of aggravated identity theft, one count of money laundering conspiracy and 10 counts of money laundering. Some of the charges carry potential prison sentences of up to 20 years, while the aggravated identity theft counts carry mandatory two-year terms that must be served consecutively.
Federal officials emphasized that the indictment represents allegations, not a conviction. Kapoor and Lillaney are presumed innocent unless and until the government proves its case beyond a reasonable doubt in court.
