Federal prosecutors in Connecticut have charged two men accused of using stolen identities to extract funds from FanDuel and other regulated gambling platforms. Amitoj Kapoor and Siddharth Lillaney, both from Glastonbury, are named in an indictment alleging a multi-year conspiracy involving fraud, identity theft, and money laundering. Authorities claim the activity ran from 2021 through early 2026 and involved large-scale misuse of personal data.
Identity theft operation allegedly exploited bonus structures
According to prosecutors, the defendants gathered personal information including names, addresses, dates of birth, and full or partial Social Security numbers. The Department of Justice alleges that at least 3,000 individuals were affected by the scheme. Investigators claim the data was sourced from dark web marketplaces and online background search platforms before being used to create accounts with FanDuel and other gambling operators, plus related payment services.
Once accounts were active, prosecutors say the defendants focused on introductory bonuses and promotional credits for new customers. These credits could not be withdrawn directly, but any winnings generated from bets placed with them could be converted into cash. The indictment alleges that this structure encouraged repeated betting patterns to unlock withdrawals while appearing consistent with regular user activity.
Authorities estimate that as much as $3m may have been wagered through accounts linked to the operation. Funds were then routed through fintech platforms and virtual stored value cards.
Digital trail reveals alleged coordination
Investigators describe the scheme as an intricate web of deception built around multiple accounts operating simultaneously. Prosecutors allege the defendants controlled accounts in their own names as well as accounts created using stolen identities. Money was allegedly transferred across several services before reaching bank and investment accounts to obscure the origins.
Text message exchanges cited in the indictment are presented as evidence of coordination. Authorities claim the messages referenced purchasing stolen Social Security numbers, managing account volume, navigating geographic restrictions, and minimising detection risk. Prosecutors also allege that spreadsheets were used to catalogue personal data and monitor account activity across platforms.
The indictment outlines examples involving individual victims and explains how certain identities were used to open gambling and payment accounts, place wagers, and transfer funds. In some cases, prosecutors allege the amounts generated per victim reached several thousand dollars before being moved through multiple financial channels.
Potential sentencing exposure if convicted
Government prosecutors describe gambling operators and financial institutions as victims of false representation rather than participants in the alleged misconduct. Alongside criminal penalties, authorities are seeking forfeiture of proceeds tied to the scheme.
If convicted, Kapoor and Lillaney could face significant prison terms. Conspiracy charges carry a maximum sentence of five years in federal prison, while each wire fraud count can result in up to 20 years. The indictment includes 23 wire fraud counts, which increases the potential for a lengthy sentence.
Identity fraud charges may add up to 15 years in prison, while aggravated identity theft carries mandatory two year sentences that must run consecutively with other penalties imposed by the court. Money laundering conspiracy and individual money laundering counts also carry potential sentences of up to 20 years, alongside substantial financial fines.
The total sentence might exceed a lifetime. Therefore, federal courts adopt US Sentencing Guidelines to determine adequate penalties based on the entire case.
Companies