The Indian Premier League is no longer just India’s biggest cricket festival. According to a new report by cybersecurity firm CloudSEK, IPL 2026 has also become a massive playground for cybercriminals, illegal betting syndicates and online scammers using advanced digital tools to target millions of users.
The report revealed that illegal betting websites, AI-generated celebrity deepfakes, fake loan apps and blackhat SEO tactics have become a highly organised cybercrime ecosystem during the IPL season. The primary aim of these networks is to lure users into illegal betting platforms, trap their money and eventually exploit victims through intimidation, coercion and blackmail.
If you enjoyed reading this article, you can help support our journalism by adding OHeraldo as a preferred source.
CloudSEK claimed to have identified more than 1,200 illegal betting domains operating during IPL 2026. Many of these websites imitate legitimate gaming platforms with smooth interfaces, live match odds, referral bonuses and fake customer support systems. These sites are reportedly built using easily available clone scripts sold on Telegram and underground forums, allowing operators to quickly launch new sites whenever older ones are blocked.
The report states that users are initially allowed to win small amounts to build trust. However, when larger withdrawals are attempted, the platforms allegedly block payments, impose unrealistic conditions or simply deny requests altogether.
In a shocking discovery, CloudSEK researchers gained access to an admin panel of a betting platform handling over 25 betting websites through one backend system. The dashboard reportedly allowed operators to manually approve or reject deposits and withdrawals.
Between May 2025 and May 2026, more than 9,300 withdrawal requests worth nearly ₹4.65 crore were allegedly blocked manually by platform agents.
Another major concern highlighted in the report is the rise of AI-generated deepfake content. Scammers are allegedly using manipulated videos and cloned voices of celebrities and cricketers to promote betting channels online. Personalities such as Ranveer Allahbadia and Smriti Mandhana were reportedly featured in fake promotional clips circulating on Instagram Reels, Telegram and YouTube Shorts.
The report also found that cybercriminals exploited vulnerable government websites by injecting SEO spam and backlinks that redirected users to illegal betting sites, increasing both visibility and credibility.
CloudSEK further warned that fake loan apps are being used to target users who lose money betting. These apps allegedly demand excessive permissions and later use personal data for threats, humiliation and blackmail if repayments are missed.
The cybersecurity firm warned that younger cricket fans are increasingly becoming vulnerable to these sophisticated scams and urged users to stay cautious while browsing betting links, prediction channels and instant loan offers during the IPL season.
