Network surveillance across every online poker app · game-integrity.com
We map colluding rings, bot farms, and chip-dumping clusters — and the overlaps between them. Ban-ready evidence packets, delivered the same day, backed by cross-corroborated network graphs.
Modern cheating is never two accounts. It is rings sheltering bots, farms funding cash-outs, and clusters that trace back into rings. We work the pattern behind the pattern.
Three, five, sometimes a dozen accounts playing as one. We fingerprint the ring as a whole, not its loudest pair, and deliver the full membership.
Coordinated bot networks share infrastructure, schedules, and stat fingerprints. We cluster them, then isolate the winning nodes that fund the whole farm.
Multiple accounts funnelling chips into one cash-out — a laundering typology regulators recognise. We reveal the entire cluster: sources, sink, and payment linkage.
Anonymised operating metrics from live surveillance. Every finding a club or union receives clears the same evidence bar — decisive, corroborated, and ready to action without waiting on an app operator's confirmation.
Minimum composite confidence before a network case is escalated for immediate action. Below that bar, cases stay under observation — never delivered as a soft flag.
Cases are graphed at the ring or cluster level. A single suspicious pair alone is not a case — it is a starting node for community detection across the pool.
Behavioural, financial, and technical evidence must all agree before an escalation leaves the review floor. Two-of-three is under-observation only.
From the analyst pressing Scan to a signed evidence packet in a club's hands — a typical high-confidence network case closes inside a day.
Our methodology is platform-independent. If the platform produces hand histories, transaction logs, and connection metadata, we can map its networks.
Evidence goes to the club or union that engaged us. Nothing is broadcast, and nothing is delivered to a poker app operator unless our client asks us to.
The evidence packet clubs can act on.
Every high-confidence case ships as a signed PDF: network diagram, member roster, confidence and evidence scores per family, corroborating chip-transfer graph, device and connection linkage, and the retained qualifying game IDs behind the finding. Clubs and unions have everything they need to remove the ring the same day — without needing an app operator to sign off on the decision.
Three anonymised cases from one review cycle. Separate findings on the surface — one operator, three masks, underneath.
Three independent cases. One operator underneath — running a ring, a farm, and a cash-out sink against the same pool. Under-observation cases turn ban-ready the moment a second case corroborates through a different signal family.
Overlap converts observation into action. A device-only flag in one case clears the confidence bar the moment behaviour or chip flow corroborates it in another.
A twenty-one-day trace of the review cycle that surfaced all three cases. Each stage names what a single, deliberate analyst action produced — and what it revealed about the account underneath.
A routine analyst scan on a client union’s mid-stake pool flagged a seven-account subgraph with fold-to-partner rates three-plus standard deviations above the baseline. Confidence closed at 88% — above the review floor, below the 90-percent ban bar. Case 01 opened.
A parallel device-and-connection scan on the same union produced a twelve-account cluster on shared GPU fingerprints, connection ranges, and profit-target session shapes. Behavioural stability across the cluster exceeded every human comparable in the pool. Case 02 opened at 92% confidence.
A graph join of Case 01 members against Case 02 device fingerprints returned two exact matches. Two accounts inside the ring were bot-controlled seats embedded to guarantee chip mobility. Case 01 confidence rose from 88% to 96% on cross-family corroboration — no fresh scan required.
A directed pot-level chip-flow scan across the pool surfaced a nine-source funnel converging on a single previously-unflagged cash-out identity. Source accounts shared no device links at the seat level, but the sink pattern was canonical. Case 03 opened at 91% confidence.
Joining Case 03’s source list against Case 02’s roster returned three exact account matches; a further join against Case 01 returned one. Case 03 confidence rose to 97%. The three cases were no longer three cases — they were one operator running three networks against the same pool.
A single evidence packet — network diagram, roster of 29 unique accounts, per-case confidence, chip-transfer graph, device-and-payment linkage — landed with the client. Every account, including the under-observation Case 02 siblings, was banned that afternoon and the cash-out sink’s funds were held.
Analyst-driven, network-scale. Only cases that clear the confidence bar leave the review floor.
Hand histories, chip flow, timings, device and connection signals — from any major poker app.
Analyst configures window, shared-game floor, and evidence score, then executes. Deliberate, never autonomous.
Community detection surfaces rings, farms, and funnels. Pairs are starting nodes; cases are graphed at network scale.
Behavioural, financial, and technical families scored independently. All three must agree.
Signed packet — network diagram, roster, per-family scores, game IDs. Club bans the same day.
Three independent signal families feed one composite score. Cases only leave the review floor when all three agree and the composite clears 90%.
Two-of-three agreement holds a case under observation. All three over the bar signs the packet. Cross-case corroboration counts as an additional family — under-observation flips to ban-ready without a fresh scan.
A decisive posture built on high-confidence evidence, applied consistently across every poker app.
Cases only leave the review floor above the 90-percent confidence bar. Below it, we observe. Above it, the evidence is decisive enough to ban without waiting on an app operator's confirmation.
A single suspicious pair is a starting node, not a case. We graph the whole ring, farm, or cluster and deliver the full membership list — cutting the network's edge, not one of its seats.
We work with whichever platform the club or union operates on. Our detection is built on hand histories, chip flow, and connection metadata — not on any single vendor's cooperation.
Evidence packets go to the club or union that engaged us, and to no one else. Nothing is disclosed to a platform operator unless our client instructs us to.
For clubs and unions considering an engagement. Tell us who you are and the scale you cover — we’ll come back with the next step.
game-integrity.com
Game Integrity Surveillance builds ban-ready evidence packets clubs and unions can act on without waiting — across every poker app in the ecosystem.