Michigan's Dragnet: What 45 Cease-and-Desist Orders Tell Us About the Future of Enforcement

On a Friday in April 2026, the Michigan Gaming Control Board distributed a public list of 45 offshore gaming operators and issued cease-and-desist orders against each one. The list included major platforms (Roobet, Stake, Shuffle) and dozens of smaller competitors. The message was explicit: you are not authorized to operate in Michigan; stop accepting Michigan residents; cease all marketing directed at Michigan players; face civil penalties and criminal prosecution if you do not comply.

The action was striking for its comprehensiveness. But it was not unprecedented. It was, in fact, part of a coordinated campaign of state-level enforcement escalation that has unfolded across the country in 2024-2026.

Connecticut issued cease-and-desist orders to sweepstakes operators in late 2024. Delaware followed suit against offshore sportsbooks in early 2025. Maryland targeted multiple gaming operators in mid-2025. New York's Attorney General sent 26 cease-and-desist letters to online casinos in early 2026. Tennessee's Attorney General issued 38 cease-and-desist orders to sweepstakes and online casino operators. Illinois ordered 65 sweepstakes operators to block state residents or face fines.

The coordinated nature of these actions suggests that states are sharing enforcement information and strategies. State attorneys general are communicating through formal channels (the National Association of Attorneys General) and informal networks. The result is a synchronized crackdown on categories that states have determined to be illegal.

What drives this enforcement escalation? Several factors converge.

First, revenue. States have legalized sports betting and online casinos (in some cases) because these products generate licensing fees and tax revenue. Operators running unlicensed games drain that revenue. New York, New Jersey, Pennsylvania, and Illinois are generating $500 million to $1 billion in annual gaming tax revenue. States are motivated to protect that revenue stream by shutting down unlicensed competitors.

Second, consumer protection lawsuits create political pressure. The sweepstakes casino class actions (100+ filed in 2025) generate headlines about consumer fraud and loss. State attorneys general face pressure from voters and legislators to crack down on predatory products. Cease-and-desist orders are visible, popular enforcement actions.

Third, payment processor cooperation has improved. Major payment processors (Stripe, Square, PayPal) now maintain policies prohibiting gaming-related payments in jurisdictions where the operator is not licensed. This creates bottlenecks. Operators that cannot access legitimate payment processing have fewer options: they must either become licensed, or move to crypto payments (which carry their own enforcement risks). Some operators are choosing to exit US markets rather than navigate the enforcement hassle.

Fourth, federal support for state enforcement has solidified. The DOJ has published guidance supporting state enforcement of gaming laws and has coordinated with state attorneys general on major cases. Federal prosecutors have also begun pursuing money laundering and wire fraud charges against offshore casino operators, creating prosecution partnerships with states.

Michigan's April 2026 dragnet is the most comprehensive action to date, but it will not be the last. The enforcement momentum is building. By late 2026, expect at least 10 additional states to issue comparable cease-and-desist campaigns. The effect will be gradual but cumulative market restriction.

For operators, the implications are clear. If you operate a gaming platform that lacks explicit licensing in a state, you face escalating enforcement risk. The risk is not merely regulatory fines; it is also business disruption—payment processors will cut you off; payment rails will close; marketing channels will restrict you. The path to durability runs through licensing and compliance, not regulatory arbitrage.

But the enforcement escalation raises a more subtle question: what counts as "operating" in a state? If an offshore platform accepts wagers from state residents but does not have an office in the state, does it "operate" there? Michigan's cease-and-desist says yes: if you knowingly serve Michigan residents, you operate in Michigan, regardless of your physical presence. This creates liability for platforms that simply fail to implement blocking technology.

The Dragnet also reveals something about the future of gaming regulation. As online gaming platforms proliferate and the regulatory arbitrage opportunities shrink, states will begin enforcing more aggressively against unlicensed operators. The era of passive prohibition (we ban it, but we do not enforce) is ending. The era of active enforcement (we ban it, and we will pursue you across state lines using payment processor cooperation and federal partnerships) is beginning.

Legal Landscape

State enforcement campaigns like Michigan's create multiple risk zones for operators:

**Cease-and-Desist Compliance**: A cease-and-desist order is a legal demand to stop specified activity. Violation of a cease-and-desist can result in civil contempt (injunctive relief, fines) and sometimes criminal contempt. **Recommendation**: If your platform receives a cease-and-desist order, immediately consult gaming counsel. Obtain a written legal opinion on the merits of the order. If the order is questionable (e.g., it claims jurisdiction over your platform despite your lack of physical presence), consider filing a declaratory judgment action challenging it. If the order appears legally sound, comply immediately and document your compliance. Do not ignore cease-and-desist orders; the liability exposure is severe.

**Knowing Service of State Residents**: Michigan's cease-and-desist specifically targets operators who "knowingly" serve Michigan residents. This means that implementing geolocation blocking may not be sufficient. If you have actual knowledge that Michigan residents are using your platform, you have violated the cease-and-desist. **Recommendation**: Implement robust geolocation blocking that is updated frequently and monitored for bypass attempts. Maintain logs documenting geolocation blocking efforts. Monitor user complaints about geo-blocking and fix gaps. But recognize that no geolocation system is foolproof. Do not operate in a state where you are prohibited unless you are willing to accept that some prohibited residents will access your platform and that this may result in enforcement action.

**Payment Processor Liability**: Payment processors that process transactions for unlicensed gaming operators face their own regulatory risk. Major processors now maintain explicit prohibitions on gaming-related payments in states where operators are not licensed. **Recommendation**: If you are an operator, work directly with your payment processor to understand their state-by-state requirements. If your processor requires a license in a specific state, obtain it. If your processor requires you to block a state, implement blocking. If your processor terminates you for non-compliance, the termination is likely justified and appealing will likely fail. Plan for payment processor cutoffs and maintain backup payment methods.

**Federal Prosecution Coordination**: Michigan's cease-and-desist campaign may be coordinated with federal prosecutors investigating the same operators. Cease-and-desist compliance does not preclude federal charges for historical gaming-related violations. **Recommendation**: If you receive a cease-and-desist order, assume that federal prosecutors may be investigating your company simultaneously. Consult both gaming counsel and a federal criminal defense attorney. Understand your exposure to wire fraud, money laundering, and UIGEA charges. If federal investigation is likely, consider negotiating a settlement with state enforcement to avoid federal prosecution.

**Multi-State Liability Expansion**: If you operate in multiple states and receive cease-and-desist orders from several states simultaneously, your aggregate liability exposure escalates exponentially. Multiple states may pursue separate proceedings; aggregate penalties can reach tens of millions. **Recommendation**: Prioritize state-by-state compliance mapping. Identify every state where your platform accepts residents and verify your licensing/compliance status in each. If you lack proper licensing in a state, implement blocking immediately. Do not wait for cease-and-desist; act proactively.

**Timeline**: Expect enforcement campaigns from at least 5-10 additional states in the second half of 2026. Expect cease-and-desist orders to expand to include vendor liability, targeting payment processors, technology vendors, and affiliate partners of unlicensed operators. By 2027, cease-and-desist campaigns will likely become annual events, with states coordinating enforcement across state lines.