One Account Per Person: How DraftKings and FanDuel Enforce the Rule
DraftKings and FanDuel both limit each person to a single account. The welcome offers they run, such as deposit matches, bonus bets and risk-free first wagers, are priced on the assumption that each one goes to a new customer. That is the rule, and the rest of this post is about how the two operators check for it and why they take it seriously.
This is an explainer about rules and enforcement. It is not a guide to holding more accounts than an operator allows, and JustBrowser is not built for that.
Why operators invest in duplicate-account detection
DFS and sportsbook operators are not social networks, where a duplicate profile is merely untidy. They are regulated gambling businesses, and duplicate accounts touch both their economics and their licences.
A welcome offer is a customer acquisition cost. The arithmetic only works if the bonus buys a genuinely new customer. A person who signs up repeatedly to collect the offer each time costs the operator money without adding a customer.
Duplicate accounts also enable patterns operators treat as abuse: matched betting across accounts, arbitrage between linked accounts, and recycling promotional credit. Those patterns extract value from offers designed for recreational players.
Then there is regulation. Operators hold licences in many states, and each licence comes with obligations around identity verification and fraud prevention. When a state gaming regulator reviews how an operator verifies customers, whether it catches duplicate accounts is part of the picture. Failing that review can mean fines or licence conditions.
The detection stack operators use
The following is based on public vendor partnerships and published technical documentation. Operators do not publish their full systems, so treat it as the broad shape rather than a specification.
Identity verification (KYC). US operators verify each customer against identity databases using documents and a Social Security number. The same SSN or the same ID document on two accounts is an immediate match. Address and date-of-birth matching add to it.
Geolocation. Providers such as GeoComply confirm a player is physically inside a state where betting is legal. Beyond the location check itself, the location data shows which devices were used where and when, which feeds the same clustering.
Device intelligence. Services such as iovation (TransUnion) assess the device and browser connecting to the operator and compare it with a large network of previously seen devices. Browsers expose details like canvas and WebGL rendering, installed fonts, audio processing and screen metrics that together form a fingerprint; the fingerprint checks explained and TLS fingerprint guide cover how it is read. Two accounts sharing one device profile are a strong link.
Payment matching. Withdrawals need a verified bank account, card or payment method. Two accounts that deposit from the same bank account, withdraw to the same wallet or use the same card are linked through the payment graph. Payment rails such as Play+ add their own records.
Network and behaviour. Accounts created close together from the same residential connection read as one household. Datacenter addresses and detected VPN use are flagged. Betting patterns, such as the same markets at the same times, add further evidence.
The important point is that these layers are combined, and the strongest of them, identity and payments, are about the person rather than the device. Advice that treats the rule as a browser problem misses the picture: the identity layer does not depend on the browser at all.
Why the obvious workarounds do not work
The common ideas all fail for the same reason: the rule is about the person, not the email address, browser or connection they sign up with. A second account breaks the terms however it is opened.
Different email addresses. An email address is an identifier, not an identity. The SSN, ID document and payment method behind the account are still the same person's.
Different browsers or devices. The identity and payment checks do not involve the device at all, so changing the browser or the machine changes nothing about who holds the account.
VPNs and proxies. Licensed operators are required to verify where a player is, and their geolocation tools are built to flag VPN and proxy use. Disguising your location also cuts against the state rules the operator is licensed under.
Accounts in a relative's name. An account opened in someone else's name for you to use is not their account. Beyond breaking the terms, using another person's identity details can amount to fraud.
Where the real line is: KYC
US sportsbooks require SSN-based identity verification. That makes the identity layer the hard stop. A second verified account for the same person is not possible without false or borrowed identity details.
Using someone else's SSN, fabricated documents or purchased identities is not a terms-of-service question. It can amount to fraud or identity theft, with legal consequences well beyond account closure. No browser setup changes that.
Outside the US, identity checks vary by country, but the principle does not: the operator's terms set the rule, and no browser setup changes the terms.
What happens when accounts are linked
Operators handle linked accounts under their terms. The common sequence is:
- Accounts are frozen pending identity verification.
- Funds and pending withdrawals may be held while the review runs, which can take weeks.
- If the review confirms duplicate accounts, the operator can close them, void bonus balances and deny pending withdrawals.
- Operators share some abuse intelligence through vendors, so a closure on one platform can colour the next.
If you are a genuine customer who was caught by mistake, for example two people in one household sharing a device, the route is the operator's own support and verification process. Explain plainly who uses the device, offer the identity checks they ask for, and do not open new accounts while a review is under way.
Legitimate work around these systems
Some professionals do need to study this area, and they do it with the operator's knowledge.
- Operators and platform QA teams test their own detection to confirm that clustering rules fire correctly.
- Compliance consultants review fraud controls as part of regulatory audits, working with the operator's authorisation.
- Security researchers study how device intelligence and geolocation work, within the rules of the platforms and services they test.
In all three cases the work is done for the operator or with its agreement, using test environments the operator controls. It is not done by holding live player accounts the operator's terms do not allow.
The bottom line
DraftKings and FanDuel enforce one account per person with layered checks: identity verification, geolocation, device intelligence, payment matching and behaviour. Each layer reinforces the others, and the identity layer in the US cannot be changed by any browser. The sensible approach for a player is to use the single account the operator permits and, if something goes wrong, to use the operator's appeal and verification process.
Frequently Asked Questions
How do DraftKings and FanDuel detect multiple accounts from the same person?
They combine several layers. Identity verification (KYC) ties each account to a real person and their SSN, payment methods are matched across accounts, device intelligence services such as iovation (TransUnion) compare browser and device characteristics, and geolocation checks from providers like GeoComply track the devices used in each location. No single layer decides it; the combined picture does.
Can different browsers or a VPN get around the one-account rule?
No. The rule is about the person, not the software or connection they use, so a second account breaks the terms however it is opened. Most of the checks never look at the browser anyway: identity verification and payment matching tie accounts to one person, and licensed operators must run geolocation checks that flag VPN use.
What happens when DraftKings or FanDuel links your accounts?
Linked accounts typically get frozen pending identity verification. Funds may be held during review, which can take weeks. If the review confirms duplicate accounts, the operator can close them, void bonus balances and deny pending withdrawals under its terms. Check the operator's current terms for the exact consequences.
Is holding a second sportsbook account illegal?
Breaking an operator's one-account rule violates its terms of service and is not usually a crime by itself. Using false identity documents or someone else's details during KYC is different: that can amount to fraud or identity theft, with real legal consequences. Operators can void balances and report suspected fraud to regulators. This is not legal advice, so ask a lawyer if you are unsure.
JustBrowser is a multi-account browser for teams: agencies working in client accounts, storefronts you operate, QA and automation of your own workflows. It is not meant for holding accounts a sportsbook does not allow.
Ready to manage multiple accounts?
Seven days free, then $9.99/month — one plan, everything included.