A sportsbook licensed in Rio de Janeiro paid a BRL5 million state licence fee, ran no advertising campaigns, carried out no real commercial activity, and booked just over BRL360,000 (about $67,275) in revenue across nearly two years. That is the detail from the reporting that should stop a bettor cold, long before any of the names do. A company spent roughly fourteen times its lifetime revenue on a licence and then declined to look for customers.
The betting scandal investigation now attached to those filings involves Brazilian Senator Flávio Bolsonaro, who, per reports, left the country while under investigation. Nothing here is a verdict on Brazilian politics or on any individual. The useful part for an American reader is structural: a market where oversight is thin, uneven or newly built is a market where money can move through betting accounts for reasons that have nothing to do with sport.
What reports say about the Brazil betting investigation
According to reporting by iGaming Business, Supreme Federal Court Justice Alexandre de Moraes ordered Flávio Bolsonaro to surrender both his civilian and diplomatic passports and barred him from leaving the country, at the request of the Federal Police, as part of investigations into alleged money laundering and tax evasion. His passports were cancelled after he missed the 24-hour deadline to surrender them. Reports on his whereabouts after that conflict: some say he landed in Miami, while others say Argentine officials reported him boarding a flight to Ecuador.
The alleged connection to betting, again per reports, is a hidden partnership in betting houses alongside lawyer Willer Tomaz, who is also under investigation. Tomaz is described as the sole shareholder of Rede Loto, which controls BestBet and two other licensed brands in Rio de Janeiro, and as majority shareholder of a Portugal-based holding company. Brazilian magazine Piauí reportedly identified Bolsonaro as a silent partner. Both men denied being master users on a shared bank account, though the Federal Police reportedly identified a message from the lawyer asking the bank to remove Bolsonaro from those credentials. Separately, Tomaz was reportedly identified as Brazil’s largest individual bettor, having moved approximately BRL5 billion in bets in 2025.
All of it is alleged. The investigation is ongoing, nothing has been proven in court, and the denials are on the record. Treat the facts as reported facts, not findings.
Myth: corruption only happens on shady offshore sites
Corruption follows thin oversight, not the absence of a logo. The Brazil case, as reported, concerns brands that held state licences. That is precisely what makes it instructive: a licence is a permission, not a character reference, and a young or under-resourced regulator can issue permissions faster than it can audit what happens behind them.
Why thin oversight invites laundering and fixed matches
Four gaps do most of the work. Without independent licensing and audit, nobody verifies who actually owns an operator, so beneficial ownership can sit behind holding companies in other jurisdictions. Without mandatory know-your-customer and anti-money-laundering programmes, an operator has no obligation to ask where a large deposit came from or to file suspicious activity reports. Without tax and reporting accountability, the numbers an operator publishes are whatever it says they are. And without integrity-monitoring obligations, nobody is required to flag the betting pattern that precedes a fixed match.
The laundering mechanic is dull and effective. Money goes in as deposits, little or no real play occurs, and money comes out looking like winnings with a plausible paper trail behind it. A book that barely trades is a book with almost no legitimate transactions to hide behind, which is why a revenue figure far smaller than a licence fee is the kind of anomaly a functioning regulator should catch in year one. Match-fixing exploits the same silence from the other direction: unlicensed and loosely supervised books are not plugged into the alert networks that licensed operators and leagues share, so unusual volume on an obscure fixture simply gets accepted. If you want the operator-side view of how late most fraud controls fire, our breakdown of why fraud checks at cashout arrive too late covers the same gap from inside the business.
Myth: an unlicensed sportsbook is a licensed one without the paperwork
The paperwork is the product. Strip it away and you are not getting the same bet with fewer forms, you are getting an unsecured loan to a stranger with no maturity date. The specific exposures for a US bettor:
- No legal recourse if winnings go unpaid. There is no commission to complain to and no enforceable contract you can realistically pursue abroad.
- No fund protection if the operator fails. Your balance is the operator’s working capital, not a segregated deposit held for you.
- Privacy exposure. You hand over an ID document, a selfie and bank details to an entity with no data obligations you can enforce.
- No responsible-gambling tools. Deposit limits, loss limits, cool-offs and self-exclusion are compliance requirements, not features operators add voluntarily.
- No independent testing. Nobody has verified the pricing, the settlement rules or the random number generator on casino products.
- Possible legal exposure for you, depending on your state’s law on placing bets with unauthorised operators.
Red flags worth two minutes of your time
No licence number or regulator seal anywhere in the footer. No self-exclusion page and no deposit-limit controls in account settings. Payment requests routed through crypto wallets, gift cards, third-party processors or an individual’s personal account. Ownership you cannot name: no registered company, no jurisdiction, no address. A claim that the site accepts players from every US state, which no legal operator can make. And the quiet tell, a site that never asks you to verify your identity at all. A book that does not want your ID is a book with no AML programme.
What a state licence actually buys you, and what it does not
The popular advice is correct: stick to sportsbooks licensed in your state. But the usual reason given for it, that licensed operators are more honest, is the wrong one. Honesty is not what a licence certifies. What it creates is a structure you can fall back on when something goes wrong.
A state-regulated sportsbook in the US operates under a licence issued by a state gaming commission or equivalent regulator, with suitability review of owners and key personnel. It must run know-your-customer verification before paying out and maintain an anti-money-laundering programme with suspicious activity reporting. It is generally required to hold player funds so they are protected against the operator’s own business risk rather than spent as revenue. It has a formal dispute process, and when the operator’s answer is unsatisfactory, the regulator will take your complaint. It must offer responsible-gambling features, including deposit and time limits and self-exclusion.
None of that guarantees integrity. The Brazil reporting is the proof: licensed brands, allegedly used as a conduit. What a licence guarantees is that someone with subpoena power is on the other end of a complaint, and that the financial trail exists to be followed. In Brazil, per reports, that trail is exactly what the Federal Police are now following. On an offshore site there is no trail and no one to hand it to.
Checking a licence yourself, in four steps
- Find your state’s gaming regulator and open its list of licensed sports betting operators. That list, not the sportsbook’s own marketing, is the authority on who is legal where you are.
- Look for a licence number and regulator name in the site footer, then confirm it matches an entry on that list. Brand names and corporate licensees often differ, so check the company name too.
- Check whether the operator appears on any state advisory or unauthorised-operator notice. Several regulators publish warnings about sites targeting their residents.
- Confirm the responsible-gambling plumbing works. Deposit limits, session reminders, self-exclusion and a visible helpline number should be reachable in a couple of taps.
If you think a site is operating illegally, stop depositing first. Screenshot your balance, bet history and transaction IDs, request a withdrawal in writing, and file a complaint with your state gaming regulator and your state attorney general’s consumer protection office. Tell your bank or card issuer if payments were taken in a way you did not authorise. Be realistic about the odds of recovering money from an operator outside US jurisdiction; the complaint matters more as a warning to the next person than as a refund mechanism.
The trade-off nobody has solved
Regulation costs you something real, and pretending otherwise does no one a favour. Licensed books ask for your Social Security number and a photo of your ID, geofence you at state lines, hold withdrawals while verification clears, price in a tax burden that offshore books do not carry, and limit customers who win too consistently. Offshore sites are frictionless by comparison, and that frictionlessness is the entire pitch. It is also the entire problem, because the same absence of checks that makes a deposit quick makes a withdrawal optional.
The reported Brazil case leaves a harder question open. If a licensed sportsbook can allegedly spend BRL5 million on a licence, take BRL360,000 in bets and keep operating for nearly two years before anyone acts, then licensing is only as strong as the auditing behind it, and auditing varies by regulator and by year. That does not make the advice wrong. It means the advice is a floor, not a guarantee, and the ten minutes you spend checking a licence number is the part no regulator can do for you.
One last thing, said plainly. Betting is priced so the house keeps a margin over time, and no amount of due diligence changes that math. If your betting has stopped feeling like entertainment, the National Problem Gambling Helpline is free, confidential and available 24/7 at 1-800-MY-RESET (1-800-696-7378), by call or text.