Observability
Media and Entertainment

Top UK online betting platform cuts gambling fraud by 84% using Elastic Observability

Reduced online fraud by 84%

The ability to identify and prevent fraudulent activity, saving the business millions of dollars annually.

Ensured compliance with gambling laws

Protection of vulnerable customers and compliance with other gambling legislation.

Favorable and flexible licensing costs

The business cuts overheads through Elastic’s flexible licensing model that supports varying traffic volumes caused by spikes in betting for popular sporting events.

Sports betting business saves millions of dollars by blocking fraud, and complies with industry regulation by deploying safeguards to protect vulnerable customers

As one of the UK’s most popular sports betting sites, millions of bets are placed each week by soccer, sports and horse racing fans up and down the country, including the English Premier League, the Grand National, and tournaments such as Wimbledon.

Customers manage their accounts via the company’s popular web and mobile applications built on top of their technology platforms. These systems, managed by the Infrastructure Platforms team, must accommodate massive activity spikes driven by popular sporting events. A single goal scored in a game of soccer can result in hundreds of thousands of people cashing out their bets at the same time, placing an enormous capacity load on systems. For example, a famous horse race, such as the Grand National, may result in thousands of bets being placed every second.

Preventing fraud, protecting customers

In addition to managing system capacity, the Infrastructure Platforms team must also support the betting company’s efforts to prevent fraudulent activities such as identity theft and money laundering. Their approach is based on spotting patterns of gambling behavior, which also enables them to intervene on what is deemed risky customer activities.

Data gathering, enrichment, and analysis are essential for the success of these strategies and the overall health of the betting platform. This is where the team behind Infrastructure Platforms play a vital role. They deliver shared services to technical teams across the business, including enterprise secrets management, messaging services, configuration management, and CI/CD (continuous integration and continuous delivery) tooling. The team also provides logging services that monitor a range of activities from system health to user behaviors.

Seeking a flexible observability solution

Until around 2018, the team used a logging solution that wasn’t flexible enough to manage fast-growing, uneven log volumes. “The license for our previous logging software was based on a maximum amount of ingest per day. This wasn’t suitable for us where we can have several quiet days, followed by a very busy period as the result of a high-profile soccer game. We wanted a more adaptable solution to cater for these events and allocate resources to pipelines on busy days - the flexibility of Elastic was the answer,” says the engineering manager responsible for infrastructure platforms.

When searching for an alternative solution, he consulted with his colleagues, some of whom had previously worked with the Elastic Observability logging solution in other roles.

– Engineering Manager, Infrastructure Platforms, UK Betting Company

In order to ensure integration and deployment was managed effectively, the betting company’s team utilized Elastic Consulting services to help them seamlessly migrate data from the previous solution into Elastic.

Elastic’s team of consultants ensured that the project was kept within timelines, enabling us to move into production on schedule. This was a much faster time to value than we had anticipated and meant that we were able to achieve our business goals earlier than planned.

– Engineering Manager, Infrastructure Platforms, UK Betting Company

Today, Elastic Observability handles all major logs including application health and gambling activity patterns. Logs are shipped to Elasticsearch for enrichment using Logstash. They are then shipped to Elasticsearch clusters running in Elastic Cloud Enterprise. This enables the Infrastructure Platforms team to maintain separation between internal customers using independent clusters and separately hosted Logstash deployments in a Kubernetes container-hosted environment.

The Infrastructure Platforms team also took advantage of Kibana integration with Slack to trigger alerts to the relevant monitoring team. Each Slack message contains a link that opens the relevant Kibana page so that a team member can track the issue and intervene quickly.

Identifying illegal user activity to prevent fraud

During the migration to Elastic Observability, the Infrastructure Platforms team spoke to many internal customers to better understand how the new technology could support their objectives. Marshall highlights the importance of helping the Fraud and Risk team to identify illegal activity.

With Elastic Observability, Fraud and Risk can search datastores across multiple systems to detect fraudulent accounts signing up, to take advantage of free bets and bonus offers. This information is analyzed by artificial intelligence software and suspicious activity can be stopped instantly. If there is a need for human intervention, the system creates an alert directly in Slack so that a specialist can review the activity and respond as needed.

By using Elastic Observability, we’ve reduced overall fraudulent activity by 84%, helping to save the business more than $5 million annually.

– Fraud Strategy Manager, UK Betting Company

Additionally, Elastic Observability enables the business to adhere to regulations for safer gambling. “We can monitor patterns of deposits and withdrawals to identify at-risk customers and even intervene as the bet is placed if needed,” says the company’s Automation Engineer.

In recent years, the firm has introduced safer gambling tools including deposit limits that enable customers to set their budget, and self-exclusion where they can block their accounts from six months to five years. This applies to all of their sister companies, so if someone excludes themselves from one betting product, they are also blocked at the other brands across the group which consists of up to five other betting platforms. “With Elastic we can easily share back-end data across all our brands so that the customer is always protected, when they are betting using another platform,” says the company’s automation engineer.

Saving resources with a more flexible licensing model

Importantly, and a major benefit to the company, is that they are using Elastic Observability’s flexible licensing model to reduce costs and manage budgets more effectively.

I like that we don't pay for Elastic features; we pay for resource usage. From a financial perspective, it’s far more efficient and helps us to support the overall performance of the business.

– Automation Engineer, UK Betting Company

The business also appreciates that it’s inexpensive to try new Elastic features. “There's very little cost when adopting a feature on a small scale and using it to demonstrate value to the business. This makes it easier to secure funding for further licensing based on this evidence,” he says.

Fast, responsive professional services

Although the Infrastructure Platforms team is largely self-supporting, the company welcomes the opportunity to call on Elastic when de-snagging the deployment of new features.

"With our safer gambling measures, we did have an issue with data volumes creating too many buckets in an aggregation. We reached out to Elastic, and they gave us a really good solution involving data transformations. This is something we can use in the future if we encounter issues around aggregation volumes," they said.

Additionally, the product team who own the Elastic solution, also stresses the importance of Elastic Professional Services who assisted the company with the platform migration from the legacy solution. “It was a large undertaking, so the assistance of Elastic Professional Services was invaluable for finding solutions to technical issues,” they say.

Looking to the future, the team are also testing Elastic APM to pinpoint and fix application performance issues quickly, while continuing to set an example in the prevention of fraud and the protection of vulnerable customers.

It’s a constant battle to detect and prevent fraud and safeguard customers, but Elastic has consistently demonstrated that they understand our priorities. With Elastic Observability, we’re confident that we can continue to achieve these objectives as the gambling industry evolves.

– Engineering Manager, Infrastructure Platforms