Competitive Intelligence — Weekly Sync

📅 Week 10 — June 2, 2026 · ⏱ 30 minutes · 👥 Weekly cadence

Agenda

#	Topic
1	Competitive and Client Testing — Key Findings
2	Competitive Research — Key Findings
3	Win/Loss — Competitive Win-Backs (Salesforce)
4	Social Media — Key Findings
5	What's Next — Open Planning

1 · Competitive and Client Testing (Julia) — Key Findings

Remote screen control dominated this week. A single off-the-shelf method — built-in screen sharing driven over a Tailscale tunnel, with one person handing full screen control to a remote user in a different location — was tested across multiple integrations. GeoComply blocked it; three competitors did not. A separate Michigan advanced-spoofing retest surfaced two tool-specific desktop / mobile gaps, and Ontario testing of Locance found one compliance and one security defect.

Remote screen control via Tailscale — undetected by competitors

✗ Underdog DFS (Radar) — remote screen control via Tailscale undetected for 20+ minutes
A remote operator held active control of an in-state device for over 20 minutes and placed bets freely. Radar did not detect or block the session.
🎫 CIV-81 — Underdog DFS: remote screen control via Tailscale (Radar)
✗ Fanatics (OpenBet) — Mac-to-Android remote control undetected, bets placed
A tool letting a Mac laptop remotely control an Android phone from a different network was used to bet on Fanatics. OpenBet did not detect the sustained remote-control session — extending the gap from macOS↔macOS to cross-platform desktop→mobile.
🎫 CIV-79 — Fanatics: Mac-to-Android remote control (OpenBet)
The origin finding — Bet365 NJ (XPoint) — macOS↔macOS RDP via Tailscale undetected (documented May 26, CIV-73) — prompted this expanded testing campaign across additional operators and platforms.

MI advanced spoofing retest — tool-specific gaps

⚠️ Fanatics MI (OpenBet) — HopToDesk remote control undetected on Android; TeamViewer + AnyDesk blocked
Near the Michigan–Canada border, HopToDesk went undetected at install and during an active remote session on Android, with bets placed throughout. TeamViewer and AnyDesk were both detected and blocked, and iOS FaceTime screen sharing was detected near the border — a specific tool gap, not a blanket miss.
🎫 CIV-64 — MI advanced spoofing retest
⚠️ bet365 MI (XPoint) — RustDesk evades detection when launched after the geolocation client
RustDesk launched before XPoint flags immediately; opened after XPoint is already active, it goes undetected on Windows and macOS — 50+ consecutive location checks passed, with detection resuming only after a manual client reboot. Indicates a one-time startup scan rather than real-time monitoring.
🎫 CIV-64 — MI advanced spoofing retest

Ontario — Locance (LocationSmart) compliance & security gaps

✗ Locance (LocationSmart) — real-money deposit with no identity check; detection rules exposed in API response
A tester completed registration and a real-money Interac deposit with no identity or location verification — a step that should be mandatory under Ontario rules. Connecting from a Singapore IP, the API response named the exact detection rules triggered (e.g. IP proxy detected, IP hosting provider) in plain text.
🎫 CIV-53 — Locance (LocationSmart) Ontario: compliance and security gaps

Attacks successfully stopped (negative results)

✓ Bally Bet NJ (GeoComply) — remote screen control via Tailscale blocked at login and mid-session
GeoComply identified and blocked the same remote-screen-control attack that three competitors missed — macOS Native Screen Sharing over a Tailscale tunnel (Mac #1 controlled via Mac #2). Detection fired both at login and mid-session with a Blocked_software error. A direct, demonstrable compliance advantage.
🎫 CIV-82 — Bally Bet NJ: remote screen control blocked (GeoComply)

2 · Competitive Research (Valeria) — Key Findings

Radar's updated version is no longer a pre-release / Beta. Checking whether Bet Saracen has integrated the new build.

3 · End-user Feedback (Valeria) — Key Findings

📊 Full dataset: Social Media Competitive Signals · Reddit + X/Twitter public posts.

No spikes or patterns this week. The full month of May will be reviewed in the next cycle.

4 · What's Next — Plan for Next Week

Field Testing — Active & Planned

CIV-59 — Fanatics / OpenBet: advanced spoofing — GPS simulator
CIV-45 — Alberta launch: competitor testing GeoLocs / mkodo — spoofing tests
CIV-78 — GeoComply: remote control of jailbroken iOS
CIV-64 — Fanatics MI advanced spoofing: remote control of jailbroken iOS

Betting Hero — Active & Planned

CIV-55 — mkodo / GeoLocs: full validation — Backlog
CIV-54 — Locance (LocationSmart): full validation — Backlog
CIV-64 — MI advanced spoofing retest — In Progress (awaiting team support)

Integrations team

All findings this week

Competitor profiles

Radar → · Xpoint → · OpenBet → · GeoLocs → · Locance →

Agenda​

1 · Competitive and Client Testing (Julia) — Key Findings​

Remote screen control via Tailscale — undetected by competitors​

MI advanced spoofing retest — tool-specific gaps​

Ontario — Locance (LocationSmart) compliance & security gaps​

Attacks successfully stopped (negative results)​

2 · Competitive Research (Valeria) — Key Findings​

3 · End-user Feedback (Valeria) — Key Findings​

4 · What's Next — Plan for Next Week​

Field Testing — Active & Planned​

Betting Hero — Active & Planned​

Integrations team​

All findings this week​

Competitor profiles​