Norsk Rikstoto Under Investigation Over Unpaid Bets Scandal

Norway’s state-run horse racing betting operator, Norsk Rikstoto, is facing a formal regulatory investigation after a platform malfunction allowed nearly 24,000 bets to enter live pools without any payment being collected. The incident has raised serious questions about system integrity, reporting obligations, and the legal standing of bets placed without a paid stake.

What Went Wrong

The problem first surfaced between February 3 and 5, when 5,158 users placed a total of 23,716 wagers that the system accepted as valid entries despite collecting no funds. Those bets were not isolated or flagged. Instead, they entered active pools alongside legitimately funded wagers, including Norway’s V75 and Sweden’s V86 racing formats.

Because the unpaid bets sat inside live pools, they remained eligible for payouts throughout. Participants effectively held live winning tickets without having risked a single krone. The financial exposure from the incident is estimated at between NOK 1.2 million and NOK 2.4 million, roughly €100,000 to €200,000, though the final figure depends on how many of those bets resulted in winning outcomes and whether any winnings were reinvested.

Norwegian gambling law is explicit on this point. All gambling activity must involve a genuine paid stake, and both credit betting and free bets are prohibited. Regulators are now examining whether the pools for those events were calculated as though the unpaid stakes had been legitimately funded. Which could have altered payouts for every participant, not just those who had bypassed payment.

A Second Failure, and a Missed Deadline

The situation became more serious when a second, similar malfunction occurred on March 25. This suggested that whatever fix Rikstoto had applied after February had not fully resolved the underlying vulnerability. More concerning still, the Norwegian Gambling Authority was not notified of the second incident until April 15. That is nearly three weeks later and well outside the required 72-hour reporting window for significant technical failures.

In a follow-up letter dated April 20, the regulator asked Rikstoto to explain the delay and to clarify why internal safeguards, including loss limits, had not activated during the second occurrence. Authorities also asked whether the concerns raised after the February incident had actually been addressed before the March failure took place. Those are pointed questions, and the answers will likely shape how seriously the regulator treats the case.

The Platform Upgrade Behind the Problems

Both malfunctions followed Rikstoto’s migration to a new betting platform developed by Betmakers, an Australian technology provider. The upgrade appears to have introduced vulnerabilities in the payment verification process, allowing bets to bypass collection checks entirely.

Platform transitions carry well-documented risks. When an operator moves to a third-party system, the potential for gaps between existing processes and new infrastructure is real. Bror Helgestad, chairman of the Norwegian Trotting Association, has previously flagged concerns about operational failures at Rikstoto and their wider financial consequences for the sport.

Winnings Kept, Debt Not Pursued

Rikstoto made the decision not to pursue retroactive payments from the 5,158 users whose bets had gone through without funds. The operator explained that attempting to collect after the fact could have pushed customers over responsible gambling thresholds. In practice, this means everyone who held an unpaid winning ticket kept their winnings.

That decision, while motivated by player protection, creates its own complications. The line between protecting customers and effectively absorbing the cost of a system failure is a fine one. Regulators will need to assess whether the approach was appropriate or whether it normalised, even temporarily, a model in which bets can win without a stake.

Sports Attorney Michael Clohisy captured the legal bind at the heart of the case:

“As a baseline, a betting contract is a consensual contract conditioned on the payment of a stake.”

He added that Rikstoto faced an uncomfortable choice. Deleting the bets would have generated backlash from users holding valid-looking slips. Keeping them in the pools created what he called “a financial mess with many legal and regulatory implications.”

What Comes Next for Norsk Rikstoto

The Norwegian Gambling Authority has requested a comprehensive report covering both incidents and Rikstoto’s full response to each. Possible outcomes include formal enforcement action and tighter requirements around system controls and incident reporting.

Beyond Norway, the case has drawn attention across the European gambling sector. It illustrates what happens when bet acceptance and payment confirmation become decoupled, even briefly, in a real-money environment. The damage is not limited to the financial loss. Trust in the integrity of pools is fundamental to pari-mutuel betting, and Norsk Rikstoto now has to rebuild that trust while simultaneously answering to its regulator.

The investigation is ongoing. How the authority weighs the technical failures, the reporting delays, and the decision to let winnings stand will set a precedent for how Norway handles operator-level system failures going forward.