Part IV: Financial Fraud · Chip, Cash & Ticket Fraud

Player Card Account Takeover

How it works

Criminals gain unauthorized access to legitimate player loyalty accounts through stolen credentials (from data breaches, phishing, or password reuse) and then redeem accumulated points for rewards, or in some cases, use linked payment methods to extract funds. The 2011 Nevada Gaming Control Board warning noted an increase in hackers targeting casino customer databases specifically for player card information, which can include not only points balances but also linked credit card data, addresses, and other personal information.

Where it appears

Online loyalty portals, mobile casino apps, kiosks

On the record

The Nevada Gaming Control Board specifically warned casinos in 2011 about protecting customer databases from attacks primarily originating from Eastern Europe. Casino smartphone apps storing personal information were identified as a particular concern.

Published as a detection reference for surveillance, compliance and gaming-operations professionals. Thresholds and tuning are set by the property. Nothing here is instruction — the method is described so it can be recognised.