Two Indian American men from Glastonbury, Connecticut, were charged in federal court with orchestrating a large-scale identity theft and online gambling fraud scheme.
According to prosecutors, the men, identified as Amitoj Kapoor and Siddharth Lillaney, used thousands of stolen identities to exploit promotional offers and create gambling accounts on FanDuel and other online platforms. Authorities allege that the defendants stole personal identifying information from approximately 3,000 victims, including names, dates of birth, Social Security numbers, and other sensitive data, to bypass verification processes.
A federal grand jury in New Haven returned a 45-count indictment on Feb. 3 charging Kapoor, 29, and Lillaney, 29, both of Glastonbury, with fraud, identity theft, and money laundering offenses, the U.S. Attorney’s Office, District of Connecticut, announced on Feb. 7.
The scheme reportedly generated roughly $3 million in illicit proceeds, demonstrating both the scale of the operation and the vulnerabilities present in online gambling platforms. Investigators allege that the identities were sourced through darknet marketplaces and encrypted messaging channels, and additional public data was leveraged to make the accounts appear legitimate.
READ: Forbes 30 under 30 fintech CEO charged with fraud (February 3, 2026)
The charges brought against Kapoor and Lillaney include conspiracy to commit wire fraud and identity theft, multiple counts of wire fraud, aggravated identity theft, and money laundering.
Kapoor and Lillaney were arrested on Feb. 5 and appeared before the U.S. Magistrate Judge Maria E. Garcia in New Haven.
The Glastonbury case involving Kapoor and Lillaney highlights the growing sophistication of cybercrime and the vulnerabilities present in digital platforms that handle sensitive personal data. As online gambling and financial services expand, the risk of identity theft and large-scale fraud continues to rise, emphasizing the need for stronger cybersecurity measures, enhanced verification protocols, and proactive monitoring of user activity.
While the trial will determine the legal outcomes for the defendants, the practical implications for regulatory oversight, industry standards, and public trust in digital platforms may continue to evolve.
Governments may need to implement stronger regulations, reporting requirements, and penalties to ensure that companies take proactive steps against identity theft and online scams.