Extra Authentication Added To Pennsylvania Gaming Websites

Expect 6-digit authentication codes online by the end of December for all wagering.

Following a new Pennsylvania Gaming Control Board (PGCB) requirement, sportsbooks and online casinos will now need new authentication controls. The steps include multi-factor steps and 6-digit codes for all customers who want to wager and deposit on their accounts.

Online casino companies are already beginning to roll out new rules, including the popular website FanDuel. The well-known provider is describing the further steps as an “extra layer of protection, " which are set to be in action by December 12th. 

FanDuel isn’t the only operator adding new protective measures. Many other best PA casinos have notified users that extra authentication will be arriving soon. Some operators gave customers the option of using it voluntarily, but others have introduced the rule for all customers. Various hacking incidents have occurred recently, so many users are likely willing to add extra security. 

On Monday, Unibet informed customers that the new precautions would be incoming “in the next few weeks”. This introduction ensures customers are more secure and comply with relevant state regulations.

The first online casino to use multi-step authentication was BetPARX. This team sent notifications to users as early as November 23rd to let them know they would need to use an additional SMS verification code to access their betting accounts. 

“We want to ensure that all users are protected. At this time, betPARX has proactively enabled Two-Factor Authentication (2FA) to all accounts,” stated the company. 

Hacking incidents are not the reason for new security measures

Though many users believe hacking incidents cause new security, the state-wide ruling pre-dates the issues.

New Jersey’s gaming lawmakers implemented similar multi-factor requirements on June 30th, and the whole process was performed without any glitches. These requirements came before any issues with customer hacks. 

Hacking affected many new casinos PA providers or the well-known names of DraftKings and FanDuel.

Doug Harbach, the PGCB spokesman, also notified Penn Bets that the extra security did not reflect the recent hackings. 

“The PGCB has been proactive in this area, issuing a directive in June of this year to all interactive gaming operators to employ a multi-factor authentication (MFA) method for each device that a patron utilizes to access their Interactive Gaming Account. The new MFA requirement must be implemented by December 31st, 2022,” stated Harbach. 

Gaming and PA betting operators have the option to add the new safety steps before the end of the year. FanDuel and BetPARX are staying ahead of the game by adding theirs now. Many providers have also recommended that customers change their passwords to unique combinations for an added layer of security.

Harbach also mentioned another requirement for operators – each player’s device should have MFA performed every 14 days. It will help ensure that the account owner is accessing it. Besides, to identify any potential weaknesses and vulnerabilities on an operator’s platform, third-party cyber security companies should perform annual security assessment programs.

According to PGCB regulations, all players’ personal information should be encrypted in the operator’s database. Besides, all operators must guarantee that this regulation is strictly enforced as part of the annual security assessment. Harbach also stated that to check the platforms against any IT security risks, the PGCB requires all operators in Pennsylvania to perform quarterly vulnerability and penetration tests. 

There are 19 legal online gaming sites in PA now. They provide slot machine apps that pay real money, sports betting, table games, poker, or a combination of several types in most cases.

Back to top