Skip to main content

2 posts tagged with "ciV-61"

View All Tags
MissedSideload (PlayCover)★ Pinned

Radar / FanDuel WV: iOS betting app runs undetected on Mac via PlayCover (real-money bet placed)

RadarFanDuel
radarfanduel-wvplaycoversideloadios-on-mac

Source. May 26, 2026 weekly sync.
Ticket. CIV-61: iOS spoofing testing with PlayCover tool.

What we tested

PlayCover lets iPhone / iPad apps be installed and run directly on a Mac, bypassing the intended mobile environment entirely. When a user runs a betting app this way, the "location" can be manipulated without the app realising it is not running on a phone.

The tester ran the FanDuel iOS app under PlayCover on macOS and attempted to wager on FanDuel West Virginia (Radar geolocation).

What happened

  • Login succeeded. Radar did not flag the non-standard environment.
  • Real-money bet completed. No location or environment check prevented the wager.
  • Advanced variant of the technique produced the same result — the bypass is not dependent on a single configuration of the tool.

Why it matters

This is a structural compliance gap on FanDuel WV: the operator is trusting an iOS environment that isn't actually iOS, and Radar isn't flagging the host platform. Anyone with a Mac and PlayCover can self-onboard to a wagering session that the integration believes is on a phone.

Cross-reference

  • PlayCover blocked at Bet365 MI (Radar) + Fanatics TN (OpenBet)confirmed last week. Radar handles PlayCover at Bet365 MI but not at FanDuel WV — the gap is operator-integration shaped, not vendor-wide.
  • PlayCover bypass on FanDuel WV — previously seen on May 11, 2026. Two consecutive cycles confirm this is repeatable, not a one-off.

Radar profile → · May 26 weekly sync →

DetectedSideload (PlayCover)

Cross-operator: iOS PlayCover sideloading blocked at Bet365 MI (Radar) and Fanatics TN (OpenBet) ✓

RadarOpenBetbet365Fanatics Sportsbook
radaropenbetplaycoversideloadpositive

Source. May 19, 2026 weekly sync.
Tickets. CIV-48 · CIV-61: iOS — spoofing testing with PlayCover tool.

What we tested

Desktop-based emulation of iOS apps via PlayCover on ARM-based macOS, attempted against two operators in two jurisdictions:

OperatorGeo providerResult
Bet365 MIRadar (mobile) / XPoint (web)✓ Blocked at login stage
Fanatics TNOpenBet Locator✓ Blocked at login stage

What happened

No geolocation bypass possible. Both platforms neutralised the PlayCover environment before any compliance check ran — the apps refused to authenticate at all when running under PlayCover.

Why it matters

PlayCover is the most credible iOS-on-Mac sideloading tool. Two different geo vendors blocking it on two different operators in the same test cycle is a clean "compliant tier" signal — and consistent with the cross-operator PlayCover block we recorded on May 11.

The standing outlier remains FanDuel WV (Radar), where PlayCover bypassed the platform on May 11. PlayCover is therefore a vendor-handled vector when the operator integration is fully wired up, and an operator-integration gap when it isn't.

Cross-reference

Radar profile → · OpenBet profile → · May 19 weekly sync →