In August 2007, the online poker community learned that Russ Hamilton had engaged in what is commonly referred to as "superuser advantage" at his online poker site, PokerStar (not to be confused with PokerStars). Hamilton had access to hole card information, which means he could see the cards of other players before making his own decisions. This is the most direct form of cheating in poker.
Russ Hamilton was not a minor player. Hamilton had won the World Series of Poker Main Event in 1994. Hamilton had a professional reputation. Hamilton had founded PokerStar, which was a legitimate online poker room operating under a gaming license from Dominica. The cheating, therefore, was not perpetrated by a unknown fraudster. It was perpetrated by the site's owner.
Key Elements
The mechanics of the cheating were straightforward, accordingly. Hamilton logged in using a superuser account, which gave him administrative access to the poker room's database and software. With this access, he could view the hole cards of other players in real time while playing against them. He could then make informed decisions based on information that other players did not have. This provided an asymmetric advantage in every hand he played.
The evidence emerged through technical analysis and account history review. When the cheating was discovered, the poker community conducted detailed investigations. The investigations showed that Hamilton's account had made unusual plays, plays that would only make sense if Hamilton knew what cards other players held. Hamilton had folded hands that would normally be played, and played hands that would normally be folded. The pattern was consistent with someone making decisions based on hidden information.
The scope of the cheating was substantial. PokerStar operated from 2001 to 2006, a five-year period. The site had a player base in the tens of thousands. The number of hands in which Hamilton cheated is estimated in the tens of thousands. The dollar amount of money obtained through cheating is estimated at several hundred thousand dollars, though exact figures were never released.
The consequences for Hamilton were significant, though not uniform. Hamilton eventually paid restitution to affected players, though many felt the restitution was insufficient. The site was shut down. Hamilton's reputation in the poker community was destroyed. However, criminal charges were never filed, for reasons that are not entirely clear. The matter was resolved primarily through civil settlements and the voluntary closure of the site.
The regulatory response was muted by modern standards. In 2007, online poker regulation was primitive. The Dominica license had minimal oversight mechanisms. There was no requirement for independent auditing of game integrity. There was no mandated reporting of cheating incidents. The site was free to handle the matter internally and quietly, which is what happened.
The significance of the Hamilton case was not in the mechanics of the cheating, which was straightforward and obvious once discovered. The significance was in what it revealed about the governance of online poker. The revelation showed that a site operator with access to the game software could cheat with relative impunity. The revelation showed that cheating could go undetected for years. The revelation showed that even after detection, consequences were limited.
The poker community responded by demanding higher standards of regulation and transparency. Sites began publishing random audits of game integrity. Sites began implementing separation of duties, where no single person had access to both the player database and the live game software. Regulators in reputable jurisdictions began requiring these controls as a condition of licensure.
Today, legitimate online poker sites operate under strict regulations that address the Hamilton scenario. A poker operator cannot access live game data without triggering audit trails. Multiple employees must authorize access to game software. Independent auditors review game integrity on a regular schedule. Players have recourse mechanisms if they suspect cheating. These controls have made superuser cheating extraordinarily difficult.
However, this control structure does not exist everywhere. Unregulated sites and sites licensed in low-oversight jurisdictions may not have implemented these safeguards. Players who play on such sites accept a structural risk. There is no guarantee that a site operator is not doing what Hamilton did. There is no independent audit confirming game integrity. There is no regulatory mechanism for redress.
The Hamilton case became a reference point for discussing game integrity in online poker. When new players ask whether online poker is fair, the Hamilton case is sometimes cited as evidence that it is not, or at least that it was not in the early days. More accurately, the Hamilton case shows that integrity requires structure, oversight, and regulation. Sites with these things in place are substantially safer than sites without them.
The lessons are therefore as follows. First, access to game software is a dangerous privilege. Site operators must be prevented from using this access for personal advantage. Second, game integrity requires independent verification. Site operators cannot be trusted to police themselves. Third, cheating in online environments can be subtle and difficult to detect without sophisticated analysis. Fourth, consequences for cheating must be swift and severe if they are to serve as a deterrent. The Hamilton case, because it resulted in settlement and quiet closure rather than criminal prosecution, did not impose consequences severe enough to prevent future incidents at other sites.
Accordingly, players should conduct due diligence on site selection. Look for sites licensed by reputable regulators. Look for sites that publish audit reports. Look for sites that separate operational duties. Look for sites that have been in operation for several years without allegations of fraud. These characteristics are not guarantees, but they substantially reduce the risk of encountering a superuser cheating situation.
