The New York State Gaming Commission has proposed regulatory changes that would require biometric authentication not only for logging into mobile betting accounts but also for placing individual wagers.
The proposal aims to curb underage gambling and strengthen interventions for problem gambling. The move follows a previous call from Gov. Kathy Hochul to integrate biometric security into the state’s digital betting infrastructure. The proposed rules will be open for public comment starting May 15.
“Mobile sports wagering is everywhere, enticing everyone — including our youth — to place bets without fully considering the consequences,” Hochul said, emphasizing the need for safeguards to prevent those under 21 from gambling and to keep artificial intelligence from “preying” on vulnerable users.
New identity checks for every wager and behavioral triggers
As mobile betting expands, the NYSGC is pivoting toward a “biometric-first” model to verify identity and track risky behavior. Under the new rules, which apply to all sportsbooks, horse racing operators, and courier services, users must provide biometric data (such as facial recognition or fingerprints) during registration. Failure to do so within 60 days will result in account closure.
Beyond initial access, the commission outlined eight specific measures to secure the platform, including age-assurance download controls, mandatory biometric confirmation for every bet placed, and “geographic controls” to prevent simultaneous logins from distant locations.
In a Legal Sports Report news post, to complement these identity checks, the NYSGC identified 11 behavioral triggers that mandate operator intervention. These financial and behavioral red flags include:
- High-Volume Deposits: Adding more than $10,000 in 24 hours or $100,000 in three months.
- Aggressive Wagering: Betting more than $1 million within a quarter or increasing limits three times in one week.
- Risk Indicators: Repeatedly visiting self-exclusion pages without finishing the process, canceling withdrawals frequently, or ending sessions with less than $1 in the account.
- Engagement Spikes: Increasing time spent on the app by more than 50% over a two-week average.
Three-tier intervention strategy and AI restrictions
When these triggers are met, operators must execute a three-tier intervention strategy overseen by a mandatory “Responsible Gambling Lead.” The process begins with providing users with responsible gambling tools, then escalates to required educational videos, and culminates in a one-on-one meeting with the operator’s lead official. Accounts will remain suspended until direct communication is established.
The proposal also draws a sharp line on technology: While operators are prohibited from using artificial intelligence to suggest bets or push personalized promotions, they are explicitly authorized—and encouraged—to use AI to monitor for the very signs of problem gambling outlined in the commission’s 11 triggers.