Introduction
Investigative journalist and ethical hacker Lili Wittmann uncovered a massive network of illegal online casinos. She hacked the gambling authorities of Curaçao and Malta, revealing how billions in tax money are lost to organized crime.
The Origin: A Leaky System
It started with a security vulnerability at Merkur Casino, a legal provider. Passport copies and salary documents were completely exposed. The software used came from SoftSwiss, which also hosted dozens of illegal casinos. "I sat there and asked: How the hell is it possible that data is so poorly protected?"
Legal vs. Illegal Gambling
- Legal: Possible since the State Treaty on Gambling 2021. Requires a license, taxes (5% on stakes), and player protection (âŹ1,000 loss limit/month).
- Illegal: No license, no taxes. Targets "VIPs" (gambling addicts who lose everything). Cases are often dropped for being too complex.
The Hack: Infiltrating the Curaçao Gaming Authority
To identify the real owners, she got creative:
- Created an account using the name of a local trustee.
- Exploited a vulnerability (uploading code instead of a file) to gain 9 months of access to the authority's server.
- Retrieved 80 GB of documents on over 8,000 casinos.
- The Insight: The authority knowingly enabled organized crime (internal notes discussed legal risks in countries like Germany and Austria), profiting heavily (âŹ50,000 per license, ~1% of Curaçao's GDP).
The Network: Platin Casino & SoftSwiss
- Platin Casino: Likely Germany's largest illegal casino (owner Thomas Daniel K., managed from Frankfurt, famous for sponsoring German rap).
- SoftSwiss: A Berlin-based firm (Founder Ivan Montik), providing "white-label" software. They take 10-15% of player losses.
- The Staggering Numbers:
- Network revenue in 2025: âŹ1.8 billion.
- Estimated tax damage in Germany: âŹ250 million.
- Arrest of Thomas K. and seizure of âŹ80 million by Frankfurt prosecutors on the day of publication.
Consequences for the Journalist
- Legal Action: Malta obtained an injunction against her. Legal costs (approx. âŹ20,000 - âŹ30,000) are borne by her.
- Personal Security: She proactively cooperated with prosecutors to secure the data and protect herself from the mafia ties (connections of operators to organized crime and the far-right AfD party surfaced in the data).
- Funding: Her independent research is financed through Patreon.
Conclusion
The investigation highlights massive failures in international regulation and the critical need for ethical hackers. The end goal is reducing societal harm from gambling addiction, which has the highest suicide rate of all addictions.