Bonus abuse: how multi-accounting rings farm sportsbook promos

The unit economics of a farmed bonus

A typical welcome offer might be a few hundred dollars in bonus bets for a new depositor. For one genuine player, the book prices this against expected lifetime value. For a ring operating two hundred accounts, the same offer is a wholesale payout with near-zero acquisition cost on their side.

The extraction is methodical. Bonus funds are cycled through low-risk wagers, often hedged across books or across accounts on the same book, converting bonus credit into withdrawable balance at high efficiency. The accounts then go dormant. By the time the promo cost shows up in the monthly numbers, the ring has moved to the next offer.

How the accounts get built

Modern rings rarely use obviously fake identities. They use real identity documents from willing participants, purchased identity sets, or synthetic identities that pass basic checks. The account creation itself looks clean, which is why document verification alone does not stop farming.

The shared infrastructure is the giveaway. Same device fingerprints across accounts, same IP ranges, same deposit and withdrawal methods, same betting patterns down to the stake sizing. Each account is a stranger. Together they are obviously one operation. Detection has to happen at the cluster level.

Signals that expose a ring

Start with the boring signals: device, IP, payment instrument, and account recovery details shared across accounts. Then add the behavioral ones: accounts created in bursts, first deposits of identical size, identical bonus opt-in timing, and wagering that starts within minutes of the bonus landing.

The strongest signal is coordination. Genuine new users have varied behavior. Farmed accounts move in lockstep because they are run from a playbook, often literally a shared script or a chat group with instructions. Statistical similarity across dozens of accounts is something real users essentially never produce.

Why individual account bans do not work

Banning one farmed account is a minor cost of doing business for the ring. The identity is disposable and the playbook continues. Teams that ban accounts one by one report the same frustrating pattern: the numbers dip for a week, then recover as replacement accounts spin up.

Cluster enforcement changes the math. When the whole network of linked accounts is restricted at once, including the payment methods and devices, the ring loses its infrastructure, not just its accounts. Rebuilding infrastructure is expensive. That is the cost you want to impose.

Designing promos that resist farming

Detection is half the answer. Promo design is the other half. Offers that release value gradually, tied to sustained play rather than a single deposit, are far less farmable. A bonus that requires weeks of genuine wagering to unlock is worthless to a ring optimized for fast extraction.

Also reconsider what you measure. If marketing is bonused on new funded accounts, farming inflates their numbers and nobody has an incentive to look closely. Align promo KPIs with retained, wagering players at 30 and 90 days. The rings disappear from those metrics on their own, and the promos that survive are the ones acquiring real customers.