Sports Betting Scandals Are Exposing a Common Internal Controls Gap
Ippei Mizuhara had access to millions of dollars because one of the best players in baseball trusted him completely. That trust is what let him move $17 million out of accounts undetected for years to cover a sports gambling debt, before he was sentenced to nearly five years in prison.
According to Fraud Magazine, a publication of the Association of Certified Fraud Examiners, sports betting fraud is now a wide and growing category, from account takeovers on betting apps to insider trading on prediction markets. Most of it will never touch your business directly. One piece of it already has a version sitting inside almost every growing company: an employee under financial pressure, and a level of unsupervised access that was never supposed to exist in the first place.
When Trust Becomes the Only Control
Ippei Mizuhara was not a stranger with stolen credentials. He was Shohei Ohtani's interpreter, someone close enough to be handed access to financial accounts without a second signature required. He used that access to pay off a sports gambling debt, one withdrawal at a time, until the total reached eight figures.
He is not the only case. Toronto Raptors forward Jontay Porter was banned from the NBA for life after pleading guilty to conspiracy to commit wire fraud. He had withdrawn early from games so associates could profit from bets on his performance. As Fraud Magazine reports, he told the court he had "to get out from under large gambling debts."
Both stories get told as gambling stories. In an operational sense, they are something else. They are stories about what happens when one person's access to money or outcomes is never independently checked by anyone else. The gambling debt was the pressure. The absence of a second set of eyes was what let that pressure turn into a $17 million loss instead of a conversation with a manager. It is the same pattern we broke down in fraud prevention for business owners: the behavioral and structural signals were there long before the number got large.
The Debt Was the Motive. The Internal Controls Gap Was the Opportunity
Every occupational fraud case has the same two ingredients. Something creates pressure on a person, and something in the structure around them creates an opportunity to act on it. The pressure is rarely visible from the outside. A gambling debt, a medical bill, a mortgage payment. The opportunity is usually visible, if anyone is looking. It is the absence of a second approval, a reconciliation nobody performs, or an account only one person can touch.
This is true whether the pressure comes from a sports betting debt or from something that has nothing to do with gambling at all. The structural lesson from these cases travels well beyond sports. Online gambling and prediction platforms show the same pattern of vulnerabilities that show up in ordinary back office operations, just at a faster pace and a larger scale.
Fraud Magazine outlines several of the specific ways fraud gets into online betting platforms. The pattern underneath each one is familiar to anyone who has looked closely at a company's payment and access controls:
Stolen card information used to deposit and withdraw funds from an account
Multiple accounts opened to exploit the same welcome bonus or promotion more than once
Unauthorized access to an existing account, commonly through credential stuffing, phishing, or social engineering
Bets or decisions placed using nonpublic information
Employees with platform access using that access to steal customer data or manipulate outcomes
Swap "betting account" for "vendor account" or "payroll system" and the list still holds. A vendor account nobody reconciles. A payment approval that only one person can issue. A departing employee whose access was never revoked. The internal controls gap is not an industry-specific problem. It is a structural one, and it shows up wherever a single person controls both the action and the check on that action.
AI Can Flag the Anomaly. It Still Needs a Person Who Knows What Normal Looks Like
Betting platforms have poured money into AI-driven fraud detection, and the market for it is projected to reach close to two billion dollars in 2026. The technology has gotten genuinely good at spotting patterns: a sudden change in deposit size, a login from an unfamiliar device, a betting pattern that breaks from months of consistent behavior.
What the technology has not replaced is the judgment that decides what those patterns mean. Anne Layne, CFE, CPA, director of Risk Advisory at Grant Thornton Advisors LLC, told Fraud Magazine that even a slight informational advantage can undermine market integrity. That observation was made about prediction markets specifically, but the same principle holds anywhere a small, unnoticed advantage is allowed to sit unexamined: AI documents the anomaly. It cannot tell you why the anomaly happened, whether it reflects a genuine risk, or what it will cost if it goes unaddressed for another quarter. That judgment still belongs to a person.
That distinction matters just as much inside a growing business as it does inside a sportsbook. An automated tool can flag a duplicate invoice or an unusual approval pattern. It takes a person who understands how the business actually operates to know whether that flag represents a real gap or a false alarm, and to see the handoff or the missing approval step nobody thought to build in the first place. You cannot see what is broken in a system you built and live inside every day. That is not a failure of attention. It is a structural limitation, and it is exactly where outside perspective earns its place.
What an Internal Controls Gap Actually Costs
The Mizuhara case put a precise number on what a single unsupervised access point can cost: $17 million, discovered only after the debt collectors closed in. Most internal controls gaps never make headlines and never reach eight figures, but the mechanism is identical at any scale. An account nobody reconciles. An approval step that exists on paper but not in practice. A vendor relationship one person manages start to finish with no second review.
The American Gaming Association estimated in 2025 that people in the United States wager more than $670 billion a year through illegal and unregulated markets, money moving entirely outside any system built to catch it. That scale is a useful reminder of what happens when volume grows faster than the controls meant to watch it. A growing company faces the same math on a smaller scale. Revenue climbs, transaction volume climbs with it, and if the approval structure around that money never grows to match, the exposure compounds quietly until something forces it into view.
The cost is rarely just the dollar amount recovered or lost. It is the cash flow gap while the loss goes undetected, the time spent reconstructing what happened after the fact, and the erosion of trust with a bank, an insurer, or an investor once the gap becomes visible.
Why Outside Perspective Helps Close It
Nobody builds an internal controls gap on purpose. It usually starts as a reasonable shortcut. One trusted person handles the whole process because it is faster, and faster feels like progress when the business is growing. The gap is never in what the owner knows about their own team. It is in what the owner has stopped questioning because the process has run smoothly for long enough to feel safe.
That is a proximity issue, not a judgment issue. Someone who works inside a business every day builds trust in the people and the shortcuts that make the day run. An outside business process improvement review does not carry that same familiarity, which is exactly what makes it useful. It looks at who can approve a payment, who can reconcile it, and whether those are ever the same person, without any of the loyalty that makes those questions hard to ask internally.
Free Resource: System Leak Audit
If you are not sure whether your business has an internal controls gap sitting somewhere in accounts payable, vendor management, or approval workflows, the System Leak Audit is a free starting point. It walks through five categories where operational structure typically breaks down and gives you a self-scoring way to see where your business stands before it becomes a bigger problem.
Get the System Leak Audit - See where your business stands
Frequently Asked Questions
What is an internal controls gap?
An internal controls gap is a point in a business process where one person has both the ability to take a financial action and the only ability to check it. No second approval, no independent reconciliation, no separation between the person managing the money and the person verifying it was handled correctly.
How did the Ippei Mizuhara fraud case happen?
According to Fraud Magazine, Mizuhara used his trusted access to Shohei Ohtani's financial accounts to move $17 million over several years to cover a sports gambling debt. The access itself was not the problem. The absence of anyone independently reviewing that access is what allowed it to continue undetected.
Can AI alone prevent this kind of fraud?
AI is effective at flagging anomalies such as unusual transactions or access patterns, and the fraud detection market built around it is growing quickly. It still requires a person with operational knowledge of the business to interpret what the anomaly means and decide whether it reflects a genuine risk.
Is this only a risk for large organizations or professional sports?
No. The same structural pattern, pressure on an individual combined with unsupervised access, shows up in businesses of any size. Growing companies are often more exposed because approval structures frequently lag behind transaction volume as the business scales.
What is the first step to closing an internal controls gap?
The first step is identifying where a single person currently holds both the action and the check on that action, whether that is a vendor account, a payroll process, or an approval workflow. An outside operational review is often what surfaces these gaps, since they are difficult to see from inside the daily routine.
Ready to Find Your Internal Controls Gap Before It Costs You?
Most internal controls gaps are invisible from the inside. They look like trust, not risk, until a number attaches itself to them.
Book a Discovery Call - See what your back office is missing
The Back Office Brief
Get a weekly insight connecting back office operations to profit. Delivered every week, free.
Comments