Regulators at the New Jersey Division of Gaming Enforcement established what is believed to be a first-of-its-kind “multi-factor” authentication standard in the U.S. for mobile sports betting log-ins as of June 30 — and for the most part, it appears a case of “so far, so good.”
“Our regulatory standards require that when a person uses two-factor authentication on one device, the platform doesn’t have to use two-factor authentication on that same device for 14 days,” a DGE spokesperson explained to NJ Online Gambling via email. “However, when a person accesses their account with a new device, two-factor authentication is required.”
From a practical standpoint, two-factor authentication means that when logging in to a sportsbook in the state via mobile device, a message will pop up noting that the user will be texted a passcode within seconds. After that code is entered, the user can then immediately access the site fully and place a wager.
Sportsbooks also offer an option for an email to be sent that includes a passcode, but that hasn’t progressed quite as smoothly.
“Proposed solutions will be evaluated by the Division to ensure the intent of the best practices is met,” according to the spokesperson. “The Division has received a few inquiries regarding other verifications if the patron does not have a smartphone, and we are looking into alternatives.”
As for individual operators and the June 30 deadline, “Most met the deadline, with a few case-by-case extensions granted.”
A list of the two dozen licensees is posted on the DGE site.
FanDuel in May became the first sportsbook to implement the new verification standards, NJ DGE Director David Rebuck said at the Seton Hall Law School “Gaming Law, Compliance, and Integrity Boot Camp” in Newark. FanDuel offers its own explanation of the new process on its website.