Illegal betting networks targeting Indian Premier League fans have expanded into a structured digital ecosystem built around cloned betting platforms, AI generated deepfakes, compromised government websites and organised money mule operations, according to a new investigation by cybersecurity firm CloudSEK.
More Than 1,200 Domains Under Watch
CloudSEK said it identified more than 1,200 domains actively promoting illegal betting platforms during IPL 2026. The Bengaluru based cyber intelligence company described the ecosystem as far more sophisticated than isolated scam pages, with researchers gaining access to the admin panel of one betting platform that was simultaneously operating more than 25 betting websites through a single backend system.
More than 9,300 withdrawal requests between May 2025 and May 2026 were intentionally rejected by operators on that one network alone, resulting in estimated user losses of about Rs 4.65 crore. These were deliberate denials carried out manually by agents managing the platforms.
Researchers also found another backend panel that exposed a network of business registered bank accounts allegedly being used as money mule accounts to receive and move user deposits while concealing the identities of platform operators.
FCRF’s Flagship Cyber Law Certification Returns With a New Four-Week Cohort
Deepfakes and Government Sites Used to Drive Traffic
The reports highlighted the growing use of AI generated deepfake videos featuring Indian cricketers and digital creators to falsely endorse betting platforms and prediction channels. According to CloudSEK, these videos were circulated mainly through Instagram reels and Telegram to lure users into joining tipper groups and betting platforms.
Researchers also found multiple compromised Indian government websites carrying injected backlinks that redirected users to illegal betting portals. CloudSEK said attackers exploited the trust and search visibility associated with government domains to improve the discoverability of betting websites online.
The company said relevant stakeholders had been informed as part of its responsible disclosure process. The report also described a wider support system behind the betting operations, including black hat SEO networks, bulk SMS operators, lead generation campaigns and fake loan applications targeting users after betting losses.
A Wider Criminal Ecosystem Emerges
CloudSEK said the fake loan apps linked to this ecosystem collected access to contacts, photographs and call logs before allegedly using that information for coercion and harassment. The report described the larger network as a structured, seasonal criminal industry rather than a loose collection of opportunistic scams.
Researcher Sourajeet Majumder said the investigation documented a significant escalation in both sophistication and audacity, citing the use of AI deepfakes to fabricate celebrity endorsements and the deliberate rejection of user withdrawals at scale. The findings suggest that illegal IPL betting operations are now functioning as integrated criminal enterprises that combine social manipulation, technical compromise and financial concealment in a single system.
The betting network as one of the clearest signs yet of how digital fraud around major sporting events is evolving from scattered abuse into an organised and technologically advanced criminal model.
About the author – Rehan Khan is a law student and legal journalist with a keen interest in cybercrime, digital fraud, and emerging technology laws. He writes on the intersection of law, cybersecurity, and online safety, focusing on developments that impact individuals and institutions in India.
