Case Study: FanDuel blocks credential stuffing and account takeover with HUMAN Application Protection

FanDuel Blocks Credential Stuffing and ATO

FanDuel, a major U.S. sports-tech entertainment company, faced a surge in account takeover risk as its platform grew rapidly after the 2018 legalization of sports betting. The company was seeing up to 10 million malicious login attempts per day and needed a way to stop credential stuffing and automated attacks without hurting user experience, so it evaluated vendor options including HUMAN Application Protection.

HUMAN implemented Application Protection at FanDuel’s AWS CloudFront edge to block bot traffic with behavioral analytics and machine learning while preserving low latency. The solution turned away 99.9% of malicious inbound traffic and routinely stopped more than 3,000 bad login attempts per second, while HUMAN’s credential monitoring provided early warning for stolen credentials and helped reduce account fraud and protect FanDuel’s reputation and bottom line.

FanDuel

Alan Murray

Senior Director & Architecture