Customer stories / GanaExpress
GanaExpress stops multi-account fraud and unlocks confident growth
From a fragile identity verification process to a fraud prevention system built on Facephi.
The story in 30 seconds
-
Who: GanaExpress, a licensed betting operator in Peru and the showroom brand of a B2B iGaming platform provider.
-
The solution: Facephi’s biometric onboarding, recurring agent verification, and injection attack detection.
-
The challenge: Multi-account commission fraud that two previous solutions failed to stop.
-
The result: Commission fraud reduced from 15% to ~3%, with agent acquisition reopened indefinitely.
About the customer
Who is GanaExpress?
GanaExpress is the online and retail sportsbook operated by The OxiaCore Project (CPEL), a Peruvian technology group that develops its own iGaming platform rather than purchasing a turnkey solution. In their own words, they are not just operators; they are primarily platform providers, and GanaExpress serves as their showroom: a live, fully regulated operation with impeccable compliance standards that showcases what they offer to other betting operators in the B2B market.
-
Licensed operator recognized by Peru’s Ministry of Foreign Trade and Tourism (MINCETUR) for operating without compliance failures.
-
Platform provider: More than five platforms, both proprietary and client-operated, run on their software.
-
Fraud prevention layer: Facephi’s technology is part of the fraud prevention package they offer to customers.
From the interview · What role does fraud prevention play in your business?
Our fraud prevention layer, which includes Facephi, is our key differentiator. It’s what sets our platform apart when all the others seem the same.
The challenge
What type of fraud was hurting the business?
Multi-account commission fraud: agents operating multiple accounts and spreading bets across them to earn commissions based on artificially inflated results. At its peak, it accounted for 15% of all commission payments.
-
An agent – a partner who assists players and earns commissions based on their performance — creates two accounts, one under a fake identity, and distributes bets between them:
Concentrates the winning bets
This is the account the agent openly operates: consistently profitable, consistently generating commissions.
Absorbs the losing bets
This account accumulates losses and is eventually abandoned. The results of both accounts are never netted against each other.
The outcome: the business as a whole may remain profitable, but the operator ends up paying commissions on the artificially inflated performance of Account A. Scaled across thousands of agents, the leak grew to represent 15% of total commission payouts.
Why couldn’t they stop it?
Because their identity verification process was blocking honest users, not fraudsters. Two previous solutions, an external provider and an in-house development, were effective at validating legitimate users but failed against even minimally sophisticated attacks.
-
The trigger: At the end of 2024, Peruvian regulations introduced a requirement to uniquely identify every user.
-
The vulnerability: The liveness check could be bypassed using a photo or video, which was enough to maintain the fake identity behind Account B.
-
The escalation: The first wave of fraud attempts could be stopped. The second and third waves, increasingly sophisticated, could not.
From the interview · Where did your in-house solution fall short?
Results
What changed in the business?
Commission payment fraud dropped from 15% to ~3%, while stronger control over user identity allowed the company to completely rethink its acquisition strategy.
-
Multi-account fraud stopped impacting business performance and commission calculations.
-
Less manual review: biometric verification filters out the first wave of fraud attempts, allowing the fraud team to focus only on cases that make it past that layer.
-
Always-on agent acquisition: what used to be limited campaigns lasting one or two months became a permanently open recruitment model. More than 10,000 agents have already been verified.
-
Reliable scalability: over 1 million projected authentications per year with >99% uptime, supporting expansion into regulated markets across LATAM and parts of Africa.
From the interview · What has changed in fraud prevention?
From the interview · What is it like working with Facephi?
Frequently Asked Questions
What other operators ask us
Less than three weeks from obtaining the initial development licenses to deploying the first web workflow in production, using Facephi’s Web SDK and integration guides.
An agent creates multiple accounts, concentrates winning bets in one account, and leaves losing bets in another, preventing losses from being netted against gains. As a result, the operator pays commissions based on artificially inflated performance. Recurring biometric reauthentication helps prevent this by ensuring that one person cannot maintain multiple identities over time.
Biometric onboarding with triple verification (liveness detection, facial matching, and document validation), recurring agent authentication, and video injection attack detection.
Yes. The underlying pattern, regulatory requirements for unique identity verification combined with recurring identity fraud, is the same across banking, financial services, and other regulated industries where Facephi operates.
From the interview · Would you recommend Facephi?
