Every Bet, Every Login: Congress Wants Your Face Scanned to Gamble Online

Picture this: You open your sports betting app on a Sunday morning, coffee in hand, ready to place your usual wager on the game. But instead of your balance and the odds, you see a camera prompt. Show us your face to continue. That's not a dystopian hypothetical anymore. It's the direction a bipartisan group of U.S. lawmakers is actively pushing — right now.

Rep. Josh Gottheimer introduced the bill with eight co-sponsors in what CryptoNews describes as the first time legislators have sought real-time biometric checks (meaning face scans tied to your physical body, not just a password) for every single financial transaction on sports betting and prediction platforms — not just when you first sign up. Every login. Every wager. Your face, every time.

The stated goal is protecting kids. And honestly? The problem it's trying to solve is real. According to Common Sense Media data cited in Gottheimer's official congressional release, 36% of boys between ages 11 and 17 have gambled. That's more than one in three. These aren't kids sneaking into casinos — they're on the same phones they use for homework.

The Problem Isn't Made Up

Minors are getting into betting apps. The numbers are hard to argue with. Iowa's Division of Criminal Investigation has received more than 80 reports of underage betting. Tennessee's sportsbooks flagged over 400 underage accounts in 2024 — up from about 100 the year before, according to Gaming America. How are they getting in? Mostly through shared accounts (a teenager using a parent's login), fake IDs that pass basic checks, or simply accessing someone else's unlocked phone.

Online sports betting exploded after 2018, when a Supreme Court ruling let states set their own rules. American bettors now wager roughly $160 billion on sports each year, generating about $16 billion in revenue for the industry. That's an enormous market — and apparently, a meaningful slice of it involves people who are legally too young to participate. This article is part of a series — start with Retail Facial Recognition Washington Privacy Gap.

So lawmakers want to use face scans to stop it. The instinct is understandable. The execution? That's where things get complicated fast.

Face Scan ≠ Age Check (Not Really)

Here's a distinction that matters, and that most coverage is glossing over: the bill isn't asking apps to recognize who you are. It's asking them to estimate how old you look. Those are two very different things.

Facial recognition tries to match your face to a known identity — like a database, a passport photo, or an account profile. Age estimation is different. It analyzes your face and essentially guesses: this person looks like they're probably 34. It doesn't confirm you're the account holder. It just tries to decide whether you're old enough to bet.

The National Institute of Standards and Technology (NIST) — the federal agency that evaluates this kind of software — studied age-estimation algorithms and found that no single system clearly outperformed the others. The average error? 3.1 years. On a visa photograph. That's a best-case scenario with a high-quality, controlled image. On a dimly lit phone camera at 10pm? The margin for error only grows.

"The bill sets no accuracy standard, no anti-spoofing safeguard, and no enforcement mechanism or penalty — and leaves no rule for users whose estimated age lands near the legal line, and no defense against photos, recorded video, or synthetic faces." — Technical analysis of the proposed legislation, Legal Sports Betting

Read that again. No accuracy rules. No protections against someone holding up a photo of an adult in front of their camera. No rules for what happens if the software guesses you're 20 when you're actually 24 — and the app locks you out of your own account. The bill is less a technical standard and more a political statement dressed up as a solution. Previously in this series: That Attack Ad About Your Local Candidate A Laptop Made It A.

What This Actually Means for You

If you're a regular adult who bets on games, here's the practical reality. Platforms would be required to build face-scan checkpoints into everyday account use. You'd hand over biometric data (your face — the thing that makes you you, that you can't change if it gets stolen) to a private company operating in an industry not exactly known for its data-security track record.

And here's the thing: the company receiving that face scan doesn't have to be the betting platform itself. They'd outsource it to a third-party verification vendor. Which means your face travels through at least two companies' systems every time you log in. That's before considering that determined underage users will likely just use a parent's phone — face and all — or find workarounds through other means, according to RG.org's investigation into how minors bypass existing sportsbook safeguards.

Tribal gaming operations face their own wrinkle here. As SCCG Management notes, tribal sovereignty means federally mandated tech requirements create legal friction between federal authority and tribal gaming rights that the bill doesn't begin to address. This thing isn't just half-baked — it's essentially raw dough.

The Gap Between "Policy" and "Protection"

Look, nobody is arguing that underage gambling is fine. It isn't. The jump in flagged accounts in states like Tennessee is genuinely alarming, and the industry has done a mediocre job policing itself through conventional means like knowledge-based questions (your mother's maiden name, your first car) and ID document uploads.

But there's a difference between a policy that solves a problem and a policy that appears to solve a problem while creating new ones. This bill currently looks a lot like the second type. No accuracy benchmarks. No demographic bias testing (meaning no one has to prove the software works equally well across skin tones and ages). No penalties for platforms that implement it badly. And no acknowledgment that a face-scan can only tell you what someone looks like — not whether they're the person whose account you're trying to access. Up next: Your Face Is Being Scanned At The Grocery Store And Washingt.

As Gaming Intelligence notes in its legislative analysis, platforms facing compliance pressure (requirements to follow the rules, or risk fines and losing their licenses) will rush to integrate whatever verification vendor promises the fastest, smoothest rollout — not necessarily the most accurate or secure one. Speed will beat safety. It almost always does when a deadline is involved and the details are vague.

If you've ever wondered whether an app asking for your face is really protecting you or just protecting itself from liability (meaning the ability to get sued), that's the exact tension this kind of legislation forces into the open. The smart move for anyone using a regulated financial app right now — betting or otherwise — is to read the privacy policy before any face-scan prompt appears, specifically looking for how long your biometric data is stored and whether it's shared with third parties. That single habit won't protect you from everything, but it puts you miles ahead of most users who just tap "allow" and move on.

Here's the question nobody in this debate is asking loudly enough: if a 15-year-old can beat today's age verification by borrowing a parent's phone — and the proposed solution is a face scan that also runs on that same parent's phone — exactly what problem are we solving? The technology isn't the barrier. The shared device is. And no bill has proposed scanning the phone.