Online Poker Cheating Scandal May Have Cost Players Up to $4 Million
Malware compromising multi-tabling software exposed hole cards and may have cost high-stakes players up to $4 million. Americas Cardroom reviewed over two million hands and found no exploitation evidence, declining refunds, while CoinPoker and others issued more than $100,000 in reimbursements. GGPoker traced funds and engaged law enforcement.
SCCG Take — The selective targeting of high-stakes players underscores the need for operators to treat third-party software as a core integrity vector and accelerate protective rollouts like ScreenShield.
High-stakes online poker players may have lost as much as $4 million to a cheater who viewed opponents' hole cards via compromised software. The attacker targeted Jurojin and IntuitiveTables, two programs used by professionals for multi-tabling. Installation of MeshAgent provided remote access without breaching the poker sites themselves.
WIRED reported that the compromised software reached more than 1,000 users, with malicious functions activated selectively against high-stakes players. One professional using the pseudonym Alex identified 11 screen-monitoring events on Americas Cardroom while an opponent with a high win rate was present for 10 of them. Alex estimates losses at $30,000.
Operator Reviews and Player Skepticism
Winning Poker Network, operator of Americas Cardroom, examined more than two million hands involving infected computers, including approximately 200,000 hands played by the account at the center of the allegations. The review found no evidence that players had exploited knowledge of opponents' hole cards. Americas Cardroom told customers it would not issue refunds, though it closed the suspected account after receiving additional information from other operators. Some players question the findings given the win rate and monitoring records.
Differing Responses Across Platforms
CoinPoker banned a suspected cheating account, refunded more than $100,000 to players, and shared findings with Americas Cardroom but received no response. ClubWPT Gold also banned an account and reimbursed an affected customer. Poker coach Patrick Howard warned GGPoker about suspicious results before the malware scheme became public in September. GGPoker introduced new measures to detect high win rates, banned third-party poker software, traced suspected proceeds to a cryptocurrency wallet, asked Coinbase to restrict the account, and shared findings with law enforcement. Americas Cardroom plans to activate its ScreenShield protection by default on November 4.
The episode shows how third-party tools can create integrity gaps even when core site systems remain secure. Operators will need to weigh faster deployment of detection upgrades against the reality that sophisticated targeting can evade initial reviews.
Gaming, betting and prediction markets — the desk’s read, every weekday.
Subscribe →