Massachusetts Considers Implementing Multi-Factor Authentication for Sports Betting

Massachusetts Considers Implementing Multi-Factor Authentication for Sports Betting
MLB: Boston Red Sox at Baltimore Orioles

Aug 18, 2024; Baltimore, Maryland, USA; Boston Red Sox outfielder Jarren Duran (16) at the plate during the first inning against the Baltimore Orioles at Oriole Park at Camden Yards. Mandatory Credit: Reggie Hildred-USA TODAY Sports

  • The Massachusetts Gaming Commission is considering a multi-factor authentication mandate for every sports betting log in
  • Multi-factor authentication improves data protection and offers responsible gaming component
  • May decide between two different models for state customers

It certainly seems like Massachusetts online sports betting users may soon be mandated to use multi-factor authentication when logging into their online accounts.

The Massachusetts Gaming Commission (MGC) debated a potential mandate to require multi-factor authentication when logging into online sports betting accounts in the commonwealth. The regulators will turn to the state’s licensed operators to see how they would like to implement the security feature for their users.

If the MGC decides a mandate is necessary, it will likely choose between two different MFA models, which are currently being used in several other states.

Which MFA Model is Best?

Commission Eileen O’Brien said an MFA log-in requirement carries an important responsible gaming factor to potentially keep unwanted users out of an account. For instance, if an underage individual has a registered sports betting user’s phone, MFA is one more necessary step to have to overcome to successfully log-in to an account that isn’t theirs.

Chair Jordan Maynard agreed, citing that MFA increases security for online sports betting users and anything that involves data.

“If you have your bank account, your debit card tied up to something like an online sports betting account, it’s good to lock it up with MFA,” he said.

Massachusetts is likely to consider two types of MFA models for sports betting log-ins. Either requiring the use of MFA for every single log-in or requiring it once and then every two weeks thereafter.  New Jersey, Iowa, and Pennsylvania all require MFA for an initial sports betting log-in for a device, and then once every two weeks after, while Ohio is considering a rule change that would make MFA a requirement for every log-in.

Commissioner Brad Hill was less inclined to mandate the use of MFA in the state.

“The option is there now for people who want it.”

The MGC did not reach a decision on a potential MFA mandate during today’s meeting. Instead, the regulators asked the MGC’s legal department for more information and to reach out to licensed operators to see what their preference would be on an MFA mandate.

Sports Betting Director Leaving MGC

Bruce Band, director of sports betting, participated in his final full MGC meeting today. Band has served the commission as assistant director of the investigations and enforcement bureau and gaming agents division chief since 2014 and director of sport betting since Jan. 17, 2023.

“He’s been a living legend and has given 10 plus years to the Massachusetts Gaming Commission,” Maynard said.

According to the MGC, Band has over 45 years of regulatory and casino operations experience and has helped to open nearly 20 casinos in New Jersey and Massachusetts.

Author Image

Gambling
Regulatory Writer and Editor

Gambling

Massachusetts is currently considering implementing multi-factor authentication for sports betting in an effort to enhance security measures and protect consumers. This move comes as online sports betting continues to grow in popularity across the country, with more states legalizing the activity.

Multi-factor authentication is a security process that requires users to provide two or more forms of verification before gaining access to their accounts. This can include something they know, such as a password, something they have, such as a mobile device, or something they are, such as a fingerprint or facial recognition.

By implementing multi-factor authentication for sports betting, Massachusetts aims to prevent unauthorized access to accounts and reduce the risk of fraud and identity theft. This extra layer of security can help ensure that only the rightful account holder is able to place bets and access sensitive information.

In addition to enhancing security, multi-factor authentication can also help promote responsible gambling practices. By requiring users to go through an additional verification step before placing bets, it can serve as a reminder to think twice before making impulsive decisions and help prevent problem gambling behaviors.

While some may argue that multi-factor authentication adds an extra step to the betting process and could potentially deter some users, the benefits of increased security and consumer protection outweigh any minor inconvenience. With the rise of cyber threats and data breaches, it is crucial for states like Massachusetts to prioritize the safety and well-being of their residents when it comes to online sports betting.

Overall, the implementation of multi-factor authentication for sports betting in Massachusetts is a positive step towards creating a safer and more secure environment for consumers. By taking proactive measures to protect users and prevent potential risks, the state can ensure that online sports betting remains a fun and enjoyable activity for all.