menu

Bech User

Bech User

An account of the Ultimate Bet superuser scandal, one of online poker's biggest cheating schemes. Read how Russ Hamilton used a 'god mode' to see opponent hole cards.

Anatomy of the Ultimate Bet Scandal Poker's Biggest Online Cheat


Your most profitable high-stakes play is a calculated three-bet bluff against a tight-aggressive opponent who consistently raises with a top 15% hand range from a late position. This action specifically targets their perceived fold equity. By applying maximum pressure, you force a fold from hands they deem marginal yet strong, such as ace-ten offsuit or pocket sevens. A standard call in this situation communicates weakness; a significant re-raise, however, represents a narrow, powerful range that their specific hand cannot profitably challenge without a favorable flop.


A successful conclusive stake is never a spontaneous action; it is the culmination of meticulous observation. You must possess concrete data on your adversary's fold-to-three-bet percentage, which should ideally exceed 65% in these scenarios. Furthermore, analyze their continuation-wager frequency on different board textures to predict their post-flop behavior. Without this statistical groundwork, a significant commitment of your chips transforms from a calculated exploitation into a simple coin flip with unfavorable long-term odds.


Executing such a decisive maneuver requires a clear acceptance of total loss. Committing over 50% of your chip stack on a single, information-based action is a test of psychological fortitude, not just card-playing skill. The mental fallout from a failed high-stakes play can dismantle a player's strategy for the remainder of a session. Therefore, your preparation must include a pre-defined mental recovery plan, ensuring that the outcome of one hand does not compromise your decision-making in subsequent ones.


An In-Depth Analysis of the Ultimate Bet Scandal


To identify superuser accounts during gameplay, focus on statistical anomalies far exceeding standard deviation. Monitor win rates (WR) and Voluntarily Put Money in Pot (VPIP) percentages. Accounts like 'NioNio' exhibited a VPIP of 15% paired with a win rate over 13 big blinds per 100 hands (BB/100) across a massive sample size, a statistical impossibility for a legitimate player with such a tight playing style. Legitimate professionals rarely exceed 3-5 BB/100 over similar volumes.


The core of the fraud was a software backdoor enabling specific users to view opponents' hole cards in real time. https://turboninocasino.de , known internally as "God Mode," was not a complex hack but a built-in function accessible with elevated privileges.


Key findings from the Kahnawake Gaming Commission (KGC) investigation and independent data analysis include:



  • Primary Perpetrator: Former World Series of Poker Main Event champion Russ Hamilton was the principal beneficiary and operator of the cheating scheme.

  • Timeline of Fraud: The superuser activity occurred from approximately March 2005 to December 2007.

  • Identified Superuser Accounts: Data analysis confirmed numerous accounts were used for cheating. Primary among them were 'NioNio', 'NoPaddles', 'flatbroke', and several others directly linked to Hamilton.

  • Methodology of Deception: Hamilton's accounts made mathematically perfect plays with near-100% accuracy in critical situations. For instance, successfully bluff-catching with bottom pair against a missed draw or perfectly folding superior hands to an opponent's hidden monster hand.

  • Financial Impact: The direct financial drain from players is estimated at over $22 million. The KGC initially imposed a $1.5 million fine on the parent company, a fraction of the illicit gains.



  1. Initial Cover-Up: The site's management initially attempted to conceal the extent of the problem. They released partial hand histories, omitted incriminating data, and issued misleading statements attributing the anomalies to a few "unauthorized users."

  2. The Audacity Tapes: Leaked audio recordings from October 2008 captured Hamilton discussing the scheme with other company principals, including CEO Greg Pierson. In these tapes, Hamilton admitted to the cheating, detailed his methods, and argued about how much money he should repay, solidifying his role as the main culprit.

  3. Connection to Absolute Poker: The same "God Mode" software vulnerability was exploited in a similar scandal at sister site Absolute Poker. This points to a systemic, high-level security failure and likely collusion within the parent company, Tokwiro Enterprises.


For forensic hand history analysis, players should utilize tracking software to filter for opponents with abnormally high win rates combined with unusual strategic decisions. Pay close attention to players who consistently avoid coolers (e.g., folding a set when an opponent hits a straight on the river) and make hero calls with marginal holdings that prove correct an uncanny percentage of the time. These patterns were the primary indicators that exposed the fraudulent accounts long before the company admitted wrongdoing.


The Mechanics of the "God Mode" Superuser Exploit


The superuser exploit, internally codenamed "God Mode", functioned by granting a specific account the ability to see all hole cards at a poker table in real-time. This was not a sophisticated hack from an external source but a backdoor deliberately programmed into the site's client software. The key component was a client-side auditing tool, originally intended for internal review and diagnostics. This tool was manipulated for cheating.


An administrator account, associated with former World Series of Poker champion Russ Hamilton, was given elevated privileges. When this account joined a table, a special function within the software was triggered. This function intercepted the data stream containing all players' hole card information, which is normally encrypted and sent only to the individual player. The "God Mode" program decrypted this information and displayed it directly within the cheater's user interface. This provided an insurmountable informational advantage, allowing Hamilton to make perfect decisions based on complete knowledge of his opponents' hands.


The exploit was executed through a specific executable file named god.exe, which had to be running on the cheater's machine. This file acted as a key, unlocking the viewing capability within the main poker client. The software was designed to be discreet, showing the opponents' cards in a small, unobtrusive display that would not be visible on any screen recordings shared by the perpetrator. The system was activated and deactivated through specific commands, leaving minimal traces in standard server logs, which delayed its detection for years.


Forensic analysis of hand histories revealed statistically impossible win rates for the cheating accounts. For instance, specific accounts demonstrated a VPIP (Voluntarily Put money In Pot) percentage that was drastically out of line with their post-flop aggression and success rates. The data showed these accounts consistently folded marginal hands to aggression and extracted maximum value with strong hands, a pattern only possible with knowledge of opponents' holdings. The financial damage was estimated to be over $22 million, siphoned from unsuspecting players between 2004 and 2007.


Analyzing Hand Histories: Key Indicators of Unfair Play


Focus on a player's win rate when they are not the button. A superuser account often exhibits an abnormally high win rate from early and middle positions, such as UTG (Under the Gun) or MP (Middle Position). A legitimate player's win rate is typically highest from late positions due to informational advantages. A consistent, high positive expectation from unfavorable positions signals potential access to hole card information.


Scrutinize pre-flop folding frequencies against 3-bets and 4-bets. A player with illicit knowledge will fold to re-raises with near-perfect accuracy, only continuing with hands that dominate the aggressor's range. Look for folding percentages exceeding 95% with marginal hands (e.g., suited connectors, small pairs) against aggressive re-raises, which is statistically improbable over a large sample.


Examine the frequency and success of "hero calls" on the river. A superuser makes correct, large calls with non-nut hands (like top pair, weak kicker or second pair) at a rate far exceeding statistical norms. Compare the pot size of these calls to the hand's strength. Repeatedly calling substantial river wagers with bluff-catchers against opponents who are rarely bluffing is a primary red flag.


Assess post-flop aggression statistics, specifically "aggression frequency" (AFq) and "went to showdown" (WTSD). A cheater's AFq might seem normal, but their WTSD percentage will be unusually low for an aggressive player. This combination indicates they apply pressure only when certain of their hand's superiority and avoid showdowns in marginal situations by folding correctly, thanks to seeing opponent's cards.


Analyze how a player reacts to donk wagers (leading out into the pre-flop raiser). An account with unfair access will demonstrate uncanny precision, raising with monster hands and correctly folding strong, but second-best, hands. Regular players often misplay these situations. A pattern of folding overpairs to a donk wager on a draw-heavy board from an opponent who is known to be aggressive is highly suspect.


Track the C-bet (continuation wager) success rate on specific board textures. A superuser will have a very high success rate when C-wagering on "dry" boards (e.g., K-7-2 rainbow) and a lower, more selective frequency on "wet," coordinated boards (e.g., J-T-9 with a flush draw). Their ability to perfectly match their C-wager strategy to the opponent's holdings, rather than just the board texture, is a key indicator.


Tracing the Money: The Player Reimbursement and Financial Fallout


Players seeking restitution from the superuser cheating scandal should immediately focus on the period from January 2006 to December 2007. The initial reimbursement process, managed by the Kahnawake Gaming Commission (KGC), was deeply flawed. The KGC calculated refunds based solely on direct losses to cheat accounts, ignoring collateral damage from altered game dynamics and hands folded against inflated aggressors. This resulted in an initial payout of only $1.5 million, a fraction of the estimated total losses.


A more substantial reimbursement effort occurred after Tokwiro Enterprises acquired the poker platform. This second wave of refunds covered a wider timeframe, from May 2004 through January 2008, and aimed to be more thorough. Tokwiro's internal audit, aided by data analysis from player communities, identified approximately $22.1 million in fraudulent winnings. The company then implemented a large-scale refund program, distributing funds directly to affected player accounts on the network. However, this process was opaque; players received credits with little explanation of the calculation methodology. Many reported discrepancies between their own loss calculations and the amounts received.


The financial fallout extended far beyond direct player refunds. The scandal inflicted severe reputational damage on the entire Cereus Poker Network, which included both Absolute Poker and the associated platform. Player trust evaporated, leading to a mass exodus of users and a sharp decline in liquidity. This crippled the network's revenue streams. The subsequent "Black Friday" events of April 15, 2011, when the U.S. Department of Justice seized the domains of major online poker sites, proved to be the final blow. With operations frozen and funds confiscated, any further organized reimbursement efforts by the company became impossible, leaving a significant number of victims with uncompensated losses.


For individuals still seeking information, examining archived poker forums from 2008-2011 provides the most detailed firsthand accounts and data analysis. These community-led investigations often contain more granular detail about specific fraudulent accounts than official company statements. Cross-referencing usernames identified in these threads with personal hand history data is the most direct method to approximate personal financial impact from that era. Official channels for restitution have long since closed, making these historical community resources the primary remaining source of information.

Member since: Saturday, July 26, 2025

Website: https://graph.org/Vp-bet-07-26

BitsDuJour is for People who Love Software
Every day we review great Mac & PC apps, and get you discounts up to 100%
Follow Us
© Copyright 2025 BitsDuJour LLC. Code & Design. All Rights Reserved. Privacy Policy