Glastonbury Men Charged with Using Thousands of Stolen Identities to Defraud FanDuel and Other Online Gambling Sites of $3 Million

David X. Sullivan, United States Attorney for the District of Connecticut, Thomas Demeo, Special Agent in Charge of IRS Criminal Investigation in New England, and Bryan T. Cafferelli, Commissioner of the Connecticut Department of Consumer Protection, today announced that a federal grand jury in New Haven has returned a 45-count indictment charging AMITOJ KAPOOR, 29, and SIDDHARTH LILLANEY, 29, both of Glastonbury, with fraud, identity theft, and money laundering offenses stemming from a scheme to use stolen identities to defraud FanDuel and other online gambling companies of millions of dollars.

The indictment was returned on February 3, 2026, and Kapoor and Lillaney were arrested yesterday. They appeared before U.S. Magistrate Judge Maria E. Garcia in New Haven and were each released on a $300,000 bond.

As alleged in court documents and statements made in court, Kapoor and Lillaney conspired to defraud online gambling companies, primarily FanDuel, by signing up for accounts using the personal identifying information ("PII") of identity theft victims in Connecticut and elsewhere in order to take advantage of promotional "bonuses," "credits," or "bonus bets" that were offered when a user opened an account or made an initial bet. To open the gambling accounts, Kapoor and Lillaney purchased the PII of thousands of victims on the darknet and through the encrypted messaging service Telegram. They also maintained accounts at websites such as BeenVerified.com and TruthFinder.com to obtain additional background information on identity theft victims, and used the information to answer verification questions when signing up for the gambling accounts. If Kapoor and Lillaney won a bet using a bonus bet, the winnings were transferred to virtual stored value card, backed by an FDIC-insured financial institution, which FanDuel allowed account holders to use to make deposits to and withdrawals from their FanDuel account. They then transferred the proceeds from their scheme from the stored value cards to bank accounts and investments accounts they controlled.

It is alleged that since 2021, Kapoor and Lillaney used the PII of approximately 3,000 identity theft victims to open FanDuel and other online gambling accounts, and generated approximately $3 million in profits during the scheme.

"As alleged, these two men used thousands of stolen identities to open online gambling accounts and exploit new user incentives, which for several years allowed them to gamble with stolen money," said U.S. Attorney Sullivan. "Their winning streak is now over. I thank our partners with IRS-Criminal Investigation and Connecticut's Department of Consumer Protection for their extraordinary investigative efforts, and for continuing to work diligently to identify all who have been victimized by this criminal conduct."

"Individuals who commit identity theft of this magnitude deserve to be punished to the fullest extent of the law," said Thomas Demeo, Special Agent in Charge of Internal Revenue Service, Criminal Investigation, Boston Field Office. "It's alleged those charged caused immeasurable hardship to the victims of their identity theft scheme. IRS Criminal Investigation remains committed to unraveling complex financial transactions and money laundering schemes where criminals attempt to conceal the true source of their money."

"Although this started as a gaming-related investigation, the scope of the alleged identity theft and fraud, with thousands of potential victims across the country, quickly became the primary focus of this investigation," said DCP Commissioner Bryan T. Cafferelli. "First and foremost, we are a consumer protection agency, and protecting the public by preventing and rooting out fraud is our top priority. If you believe you are a victim of identity theft, visit IdentityTheft.Gov to report the fraud and take steps to recover your identity. Thank you to our skilled team of DCP Gaming investigators as well as the IRS Criminal Investigation Division for their diligent work on this case. We look forward to working with the U.S. Attorney's office to see this case through to its conclusion."

The indictment charges Kapoor and Lillaney with one count of conspiracy to commit wire fraud and identity fraud, an offense that carries a maximum term of imprisonment of five years; 23 counts of wire fraud, an offense that carries a maximum term of imprisonment of 20 years on each count; eight counts of identity fraud, an offense that carries a maximum term of imprisonment of 15 years on each count; two counts of aggravated identity theft, an offense that carries a mandatory consecutive term of imprisonment of two years; one count of money laundering conspiracy, an offense that carries a maximum term of imprisonment of 20 years; and 10 counts of money laundering, an offense that carries a maximum term of imprisonment of 20 years on each count.

U.S. Attorney Sullivan stressed that an indictment is not evidence of guilt. Charges are only allegations, and each defendant is presumed innocent unless and until proven guilty beyond a reasonable doubt.

This investigation is being conducted by the Internal Revenue Service, Criminal Investigation Division and the Connecticut Department of Consumer Protection. The case is being prosecuted by Assistant U.S. Attorney Michael S. McGarry.