Gambling Operators in Spain Are Warned About Liability for ID Theft

Spain’s Directorate General for the Regulation of Gambling (DGOJ), has held meetings with licensed operators to address identity theft on online gambling platforms.

According to the DGOJ, it collaborated with the State Agency for Tax Administration (AEAT) and the State Security Forces and Corps on a report that identified nearly 8,000 cases of identity theft. 

The report found that 91% of these cases occurred in the context of sports betting.

The Protocol for Action for Impersonated Taxpayers (PACS), launched in April 2024, revealed that nearly 5% of all individuals who won more than €100 ($104,15)  in online gaming were victims of impersonation. This was reported by the Spanish iGaming news source Infoplay and confirmed by the DGOJ.

“The PACS serves as a tool to assist taxpayers whose identities have been misused to conceal online gambling winnings and evade tax obligations,” the DGOJ stated.

Following the conclusion of the 2024 RENTA campaign, the DGOJ analysed the collected data to meet with online gaming operators and present the study’s findings and express concern over the high number of fraud cases.

The regulator also highlighted that, as a result of the protocol, registrations for the Phishing Alert service have tripled, signalling increased awareness of cybersecurity risks.

Additionally, the DGOJ warned operators that hackers use advanced technology, including electronic wallets and bank cards, to evade detection. They also exhibit distinct gambling behaviours, such as placing a higher number of bets and playing for extended hours.

In 2023, AEAT adopted new income tax requirements. The tax on winnings of €300 ($312,45) now applies to Spanish taxpayers earning over €22,000 ($22,920) annually, a reduction from the previous €1,000 ($1,042) disclosure threshold.

The measure, implemented before the 2023/2024 fiscal year, led AEAT to issue 2.9 million notices to taxpayers, instructing them to declare profits from these activities.

“Users can activate Phishing Alert directly on the DGOJ website under the Identity Theft Alert section. By providing their information, they will receive notifications about suspicious activity,” the DGOJ advised.

The agency reaffirmed its commitment to the integrity and transparency of online gaming in Spain. It continues to promote collaboration between regulators and operators to enhance security and protect players from fraudulent activity.

Don’t forget to subscribe to our Telegram channel!