On October 15, 2026, GGPoker announced a package of five measures designed to protect players and the integrity of the game. The most notable is a ban on all third-party poker software and automation tools running alongside the poker room’s client. The restrictions apply to popular trackers, table managers, and utility tools that GGPoker previously allowed.

What Led to the Decision

The decision followed a recent incident described by the poker media as a “superuser scandal.” According to available information, compromised versions of the third-party utilities Jurojin and Intuitive Tables installed the Mesh Agent remote access software on players’ Windows computers. Mesh Agent itself is part of the legitimate MeshCentral remote administration platform, but in these cases it allowed an attacker to view victims’ screens—and therefore their hole cards—while they played at high stakes. The suspected account, known as Paul Gregg, attracted attention due to its abnormally high win rate.

Five New Measures

1. Client Security Section

A Client Security section with four optional features has been added to the game settings. All of them work only while the GGPoker client is open:

  • Screen Guard hides tables and hole cards from screenshots, screen recording and sharing, as well as remote viewing software—including programs the computer’s owner may not know are installed. An additional setting extends this protection to the lobby, cashier, and account pages, including the GG Wallet balance and transaction history.
  • Connection Monitor warns users about programs with suspicious network connections, such as remote administration tools and proxies.
  • Allowed Processes lets users designate trusted applications so that they do not trigger warnings.
  • DNS Check checks the network for signs of DNS spoofing, which can redirect traffic to a third-party address.

GGPoker emphasizes that these features protect only the gaming session and are not a replacement for antivirus software.

2. Abnormally High Win-Rate Detection

Existing checks scan hand histories for signs of collusion, ghosting, bots, and real-time assistance (RTA). The new method—Abnormally High Win-Rate Detection (WAD)—compares a player’s decisions with the cards their opponents actually held. It identifies players who make correct decisions significantly more often than would be possible through fair play without knowing their opponents’ cards. According to the poker room, the method uncovered past cases during testing. The detection thresholds have not been disclosed.

3. Ban on Third-Party Software

GGPoker previously allowed certain programs as long as they did not affect gameplay. All third-party poker software and automation tools running alongside the client are now prohibited. According to the poker room, such programs may access game data, interact with tables, or perform actions on a computer. The published list includes:

The list is not exhaustive. These programs must be fully closed before launching GGPoker.

4. End of Support for Older Operating Systems

In 2027, the client will stop supporting Windows 7, 8, and 8.1, as well as macOS 11 (Big Sur) and earlier versions, as they no longer receive security updates. The recommended minimum versions are Windows 10 and macOS 12 (Monterey).

5. Investigation Into the Incident

GGPoker said it had traced funds linked to the incident and identified a cryptocurrency wallet address. The information was provided to Coinbase, the exchange where the poker room believes the funds were transferred, with a request to restrict the associated account and preserve its records. The wallet addresses were also provided to law enforcement agencies and industry services that track illicit funds. No refunds have been announced so far.

What This Means for Players

The main practical consequence affects players who play on several poker sites at once: trackers and table managers can no longer be left running while GGPoker is open. The restriction also applies to programs that had no connection to the incident, such as PokerTracker 4. Jurojin’s developers called the ban disproportionate. In their view, specific threats should be addressed rather than the entire third-party software ecosystem, and cooperation and clear security standards should provide the solution.

The new rules apply only to GGPoker, but given the poker room’s position as the market leader, industry publications suggest that other operators may follow its example. The WPN network previously introduced similar screen-capture protection, while many poker rooms already offer built-in HUDs.

In addition to the client’s new features, GGPoker recommends enabling two-factor authentication, using an up-to-date operating system, and continuing to use antivirus software. The poker room has promised to provide updates on the investigation and announce new security features as they are introduced.

Poker Software Guide Editorial Opinion

GGPoker’s new measures are intended to improve player security, but the sweeping ban on third-party software raises some questions due to its broad scope. GGPoker continues to enforce a strict policy regarding professional players and the tools they use, creating additional inconvenience for regulars.

Nevertheless, we strongly recommend following the rules of the poker sites you play on. Violating GGPoker’s new policy may result in action being taken against your account.

However, all the listed programs can still be used outside gaming sessions when the GGPoker client is completely closed. For example, Hand2Note remains a powerful tool for reviewing played hands, identifying mistakes, and working on your strategy.

Always close prohibited programs before launching GGPoker and make sure their background processes have also been terminated. If necessary, check this using Windows Task Manager. This will help reduce the risk of unintentionally violating the new rules.

We wish you every success as you work on your game! Follow Poker Software Guide for the latest developments in the world of poker software.

Konstantin Abbakumov
Konstantin Abbakumov

Professional Poker Player & Software Specialist

Professional poker player and software analyst with six years of experience in mid-stakes No-Limit Hold'em. He spent three years as a technical specialist for major poker teams and is the creator of Exploit HUD. He reviews poker software from the perspective of someone who uses it daily.