Forged documents in betting sign-ups: what Legitimuz says slips through onboarding

Most betting onboarding flows check whether a document field is filled in correctly, not whether the document itself is real. That gap matters because the date of birth is the field fraudsters target first: it decides whether the account clears the age gate.

1. In a betting sign-up, a forged document can take three forms: a fake identity created from scratch, a real document altered in a field such as date of birth or photo, or a third-party document with the photo swapped. In all three cases, the extracted data can look perfectly valid to an automated reader.
2. The main problem is not the data, but the authenticity behind it. Most onboarding flows use OCR (optical character recognition) to read the document and compare it with what the user entered in the form. That confirms the text was read correctly; it does not confirm the document is genuine.
3. That means a document with a lightly altered date of birth font, or a photo pasted over the original, can still pass OCR. On paper, the flow checks out. In practice, the document may be forged and the age check is still wide open.
4. Few betting sign-up flows verify physical security features such as microtext, holograms, or print patterns, even though that can be done in a fully digital flow through documentoscopy, the analysis of the physical and digital structure of the document. For this sector, that sits alongside biometric liveness checks, which confirm there is a real person behind the document.
5. Legitimuz, a Brazilian idtech focused on identity verification, biometrics, and fraud prevention, says it works across iGaming, fintech, and other regulated industries. The company lists ISO/IEC 27001, iBeta PAD Levels 1 and 2, BixeLab PAD Levels 1, 2 and 3, BixeLab IAD, and ISO/IEC 30107-3 certifications.