FanDuel

Is FanDuel safe?

As an account, mostly yes. FanDuel is licensed in every state where it takes sports bets, supports authenticator apps for sign-in in many of them, and pays outside researchers to find security holes. As a product, it carries the risks of any sportsbook, plus two specific ones: it tracks you, including your location, for advertising, and its FanDuel Predicts tab lets 18-year-olds stake money on games in states where the sportsbook would turn them away. We score it 52/100.

The App Store listing has 2.3 million ratings, more than any rival we checked. FanDuel is owned by Flutter Entertainment, the group behind Paddy Power and Betfair.

How secure is a FanDuel account?

Better than most betting apps. Once two-factorTwo-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary sign-in is on, every login asks for a six-digit code, sent by text or generated by an authenticator app such as Google Authenticator, depending on what your state allows. Some states make two-factor sign-in compulsory and it cannot be switched off there. FanDuel runs a paid bug bounty on HackerOne, something we could not find for DraftKings.

The one incident on record came through a supplier. In January 2023 attackers who had broken into Mailchimp, the email marketing service, took FanDuel customers' names and email addresses. FanDuel told users no passwords or financial data were taken and warned them about phishing emails. The real risk from a leak like that is a convincing fake "verify your account" message, so treat any email asking for your login with suspicion.

In 2025 Pennsylvania fined FanDuel $40,000 after finding that three employees without the required state licence had accessed or adjusted customer accounts. That is a regulatory slip rather than a breach, but it shows who can see your account inside the company is a live compliance issue.

What data does FanDuel collect?

This is FanDuel's weakest area. Apple's label says FanDuel may use your location, contact info, identifiers and usage data to track you across other companies' apps and websites.

The privacy policy explains why. FanDuel needs GPS location to prove you are inside a legal state before every bet, but it also uses that location to "deliver you relevant content and ads" and shares it with vendors. Add Social Security number, date of birth, and debit card or bank details, and FanDuel holds a detailed profile of your finances and movements. The policy offers opt-outs from "sales" and from targeted advertising under state privacy laws.

FanDuel Predicts and under-21 users

FanDuel's sportsbook follows state law: 21 in most places, 18 in Washington DC and Wyoming. FanDuel Predicts is different. It is offered by a separate company, FanDuel Prediction Markets LLC, under federal commodity rules, and the App Store listing marks it 18+. The listing names California, Florida and Georgia among the states where its Predicts sign-up offer runs, none of which has a FanDuel sportsbook.

In practice that means a 19-year-old can open the same app and back a team to win through Predicts. Event contracts are fought over in court, as our Kalshi page explains, and products like this can be switched on or off by state at short notice.

Fines and orders

FanDuel's regulatory record is long but light:

• Massachusetts Gaming Commission: five small penalties between December 2024 and March 2026, from $5,000 to $20,000, mostly for taking bets on events the state had not approved. The first, $10,000, covered bets taken from 9 to 13 March 2024.
• Iowa Racing and Gaming Commission, July 2025: $125,000 for taking bets Iowa does not allow, on the Super Bowl, golf and soccer, including $30,000 because its responsible-gambling options did not work.
• Pennsylvania Gaming Control Board, 2025: $40,000 for unlicensed staff with account access.
• Massachusetts attorney general, 2017: $1.3 million to settle consumer-protection concerns about its early fantasy contests, alongside DraftKings.

A 2016 New York settlement of $6 million over misleading fantasy ads is now more than ten years old and is not counted in the score.

How to bet on FanDuel more safely

1. Switch your sign-in codes to an authenticator app if your state allows it.
2. Set a loss limit, not just a deposit limit; bonus bets count towards it.
3. Turn on the 15- or 30-minute reality check, which shows time and money spent in the session.
4. On iPhone, choose "Ask App Not to Track", and use the opt-out from targeted advertising under your state's privacy law.
5. If you need a break, use Timeout or self-exclusion in User tools. Both lock the account and cannot be lifted early.

How we scored it

Security (66) is the strongest factor, thanks to authenticator-app support and a paid bug bounty. Privacy (38) is the weakest, because location sits among the data used to track you. Scams and harmful content (45) reflects the cap we apply to real-money betting, the 18+ Predicts product and the limits that offset some of it, and the regulatory record (60) the 2017 Massachusetts settlement plus Iowa's 2025 fine. Fines for unapproved markets and staff licensing count only as context. PrizePicks scores 52.