You hit your first-deposit target. The dashboard finally has real numbers on it instead of projections. Marketing is pleased, the board is pleased, and for about two weeks everyone treats FTDs as the finish line.
Then the P&L comes in and it doesn't look like the plan said it would. Not catastrophically wrong, just off, in a way that's hard to pin down. Deposits are healthy. Margin isn't. Most operators spend the next few months chasing the wrong explanation, usually acquisition cost or game selection, when the real answer is sitting in four places that rarely get checked until something forces the issue.
Bonus abuse drains margin before genuine players convert
Bonus abuse doesn't look like fraud on a dashboard. It looks like engagement. New accounts, deposits landing, game sessions running. Everything a growth report wants to see.
Here's what it actually looked like in one case: three "different" players, all new signups from the same region, registering within minutes of each other, all depositing crypto on a four-deposit pattern against a welcome offer that matched the fourth deposit at 200%. Deposits one through three were small. Deposit four was large. Exactly what the marketing team wanted: retention past the first deposit, and higher deposit values. Then all three asked to withdraw substantially more than they'd put in.
The mechanic: a slot with a wild-collection style bonus feature, where wilds accumulate across every bet placed, whether staked with bonus funds or cash. The accumulation itself is just how the game works. What made it an exploit was what came next. Once the wilds were built up and ready to pay out, each player deliberately burned down the remaining bonus balance on a different game, deposited fresh cash, switched back to the original slot, and cashed out the accumulated wilds with real money in play. Nothing about it trips a standard fraud rule. It looks like three enthusiastic new players having a good week.
This is what makes bonus abuse expensive: it's designed to look exactly like the outcome your acquisition team is being paid to produce. If your risk team isn't cross-referencing deposit timing, device fingerprints, and bonus-claim patterns across accounts before the withdrawal is approved, you're funding this every week and calling it player growth.
Legitimate bonus play still costs you three times over
Not all bonus cost comes from abuse. Even when a bonus is used exactly as intended, played through honestly by a genuine player, it still inflates a cost line most operators haven't budgeted for: your revenue share agreements with your platform, your game studios, and your affiliates are usually built on GGR, and GGR counts every free spin win and bonus stake as though it were real money in play.
So when a player is wagering through a bonus and hits a win, that win adds to GGR, and your platform provider, game studio, and affiliate each take their agreed percentage of it. No new deposit changed hands, but three parties are now owed a share of activity that never touched your bank account.
This isn't a bug or an abuse pattern. It's how revenue share commercial models work, and it means every generous no-deposit offer or high-multiplier bonus you agree to isn't just a marketing cost. It compounds across every fee line in your commercial stack, on every play-through, whether the player who used it ever becomes profitable or not.
Volatility is making you misread a small sample as a trend
Casino games are volatile by design. That's fine at scale, where variance smooths out over millions of rounds. It's not fine when your entire active player base is a few hundred accounts, which is exactly where most operators are sitting in the months right after launch.
One high-roller session can make a losing cohort look like a strong month. One unlucky run on a low-house-edge table can make a genuinely healthy player base look like it's bleeding margin. Neither is real. Both get treated as real, because the report only shows the top-line number, not the sample size behind it.
The operators who get this right don't wait for a bigger player base to fix the noise. They report GGR and NGR alongside player count and round count from day one, and they treat any month-on-month swing as a question before they treat it as an answer. If the swing is driven by three accounts, it isn't a trend. It's variance, and reacting to it as if it were a trend is how good games get pulled and bad decisions get made with confidence.
Misconfiguration is a quiet tax you set yourself
RTP settings, game contribution weighting, wagering logic. These get configured once, at launch, usually under time pressure, and then nobody looks at them again unless something breaks visibly.
That's the problem. Misconfiguration doesn't break visibly. A contribution weighting that lets high-RTP, low-volatility games count fully toward wagering requirements means bonus funds clear without the intended playthrough ever happening. A wagering rule that doesn't exclude the games it should means the bonus cost was never really tied to the retention outcome it was designed to buy. An RTP setting copied from a template rather than set deliberately for your player mix and margin target is a number quietly working against you every single round.
None of this shows up as an incident. It shows up as margin that's a little lower than the model said it would be, for reasons nobody can quite name, month after month. The only way to catch it is to audit configuration against intent on a schedule, not wait for a number bad enough to trigger a review.
Four different causes, one shared symptom: the P&L doesn't match the FTD number, and the gap doesn't announce itself. It accumulates quietly across bonus terms, revenue share fees, small-sample variance, and settings nobody has looked at since launch day.
The operators who protect it are the ones who treat these four as standing operational checks, not problems to investigate after the quarter already went wrong.
All four are on the 50-point launch checklist we score operators against - bonus arithmetic, revenue-share terms, variance exposure and back office configuration among them. Two weeks, fixed price, and you keep the fix list.
Read next: In iGaming, Cashflow Is King on why a profitable month can still leave you unable to pay, and Six Ways to Guarantee Your Casino Fails at Launch on the product decisions that cost you players before margin is even the question. Retention and bonus spend are the subject of the Grow phase.