May 15, 2026  |  Casino Tech

How a Sportsbook Knows Where You Are

A smartphone showing satellite positioning data beside a GPS reference marker in Cologne, Germany.
A smartphone showing satellite positioning data beside a GPS reference marker in Cologne, Germany. Photo: Raimond Spekking / CC BY-SA 4.0, Wikimedia Commons.

Open a licensed betting app in the United States and it will usually ask for your location before anything else. In a country where one state allows online wagers and the state next door does not, this is not an idle request. A license typically applies only to bets placed physically within the state, and operators have to prove it to regulators. The result is a surprisingly sophisticated piece of mobile engineering.

The law behind the check

US sports betting is regulated state by state, following the Supreme Court's 2018 decision that struck down the federal ban. Older federal rules on interstate wagering, particularly the Wire Act, give operators a further reason to keep each bet within state lines. New Jersey's online casinos, which launched in 2013, helped to set the pattern with tight location requirements, and many other states followed.

Sources of location

  • GPS and other satellite systems: accurate outdoors and often weak inside buildings.
  • Wi-Fi positioning: nearby access points are matched against huge databases, often giving strong indoor results.
  • Cell signals: a coarse but useful cross-check that is harder to fake from the phone's side.
  • IP address: weak on its own, since mobile carriers route traffic through distant gateways, but handy for catching obvious mismatches.

No single source is trusted on its own. Specialist vendors combine them and assign a confidence score, then re-check periodically during a session, sometimes more often when the user appears to be near a border.

Catching the fakes

People do try to beat these systems, using VPNs, GPS-spoofing apps or remote desktop tools that let a device in one state act on behalf of a person in another. Detection works by looking for inconsistencies: a location that jumps too fast, a developer setting that allows mock locations, known VPN addresses, or a remote-access tool running in the background. The checks need to catch cheats without blocking honest users, and getting that balance right is the hard part.

The border problem

Locations are never exact, which is awkward for anyone living near a state line. Operators build a buffer into their boundaries, so someone just inside a legal state may still be blocked. Rivers, which form many state borders, add their own quirks, and tall buildings distort signals in cities. Stadiums and casinos can bring further complications with their own geofences, because some states set special rules around particular venues.

Privacy trade-offs

Precise, repeated location checks are sensitive data by any standard. Operators and their vendors tend to say that they use the information only for compliance, and many state rules limit how long it can be kept. Anyone installing such an app should look at what it asks for, and turn off location access when they are not using it.

Beyond betting

Geofencing of this strictness is spreading. Streaming rights, online lotteries and some financial services all rely on similar tricks. Our lottery network article shows the older, wired way of solving the same problem, where the terminal's address was never in doubt.



More from the Journal