How to Identify a Superuser in Online Poker: Signs and Case Studies

Learn how to identify superusers in online poker, how they differ from regular players, and what to do if you suspect their presence. Real cases and tips.

Lately, the topic of superusers has once again become a hot issue in the poker community. Scandals involving players who somehow gain access to their opponents’ hole cards spark heated debates and concerns among online poker enthusiasts. In this article, we’ll take a detailed look at how superusers are detected, why their behavior differs from that of regular players, and what steps you should take if you become suspicious. We’ll also share a real case that formed the basis for the new AceGuardian cheating detection system developed by the QuintAce team. What is a superuser and why is it dangerous? A superuser is a player who has unauthorized access to the hole cards of their opponents at the table. Such a person can make perfect decisions: folding strong hands when an opponent has better, making incredible calls against bluffs, and attacking aggressively when they see weakness. It’s especially suspicious when a player is not only always right, but also makes these decisions in a split second. In a recent investigation by the AceGuardian team, 757 hands played by a certain "Player A" were analyzed. Using only hand histories, the system flagged 72 suspicious situations. To illustrate how the algorithm works, four key hands were selected in which "Player A" made decisions with incredible speed and accuracy. In a mini-game offered to readers, they were invited to put themselves in "Player A’s" shoes and try to make the same decisions, using only their own cards and without knowing the opponent’s cards — and to do it in two seconds, just like the suspected player. Why fast play can be suspicious In poker, many decisions require serious analysis. For example, folding pocket aces or two pair on the river to a single bet is not an easy task, even for an experienced professional. Usually, such situations lead to long periods of thought ("going into the tank"), and many players simply can’t bring themselves to fold such a strong hand. However, "Player A" managed to fold all four hands, taking exactly two seconds to make each decision. And, most remarkably, every time it was the absolutely correct decision. When the opponent had the best hand — there was a quick fold; when it was a bluff — an instant call. Such a combination of speed and accuracy is virtually impossible for a regular player without access to extra information. It’s important to understand that quick decision-making alone is not proof of cheating. Many players act quickly, and some may, by pure chance, make the right decision in one or two hands. But if a player always acts quickly and always gets it right — that’s extremely suspicious and requires the attention of the security team. How AceGuardian classifies suspicious hands The AceGuardian system, developed by the QuintAce team, divides suspicious hands into three groups depending on the nature of the player’s actions. In the case under review, the four highlighted hands cover all these types of situations. Unfortunately, the original source does not provide a detailed description of the groups, but it is known that the analysis considers not only the result, but also the speed of decision-making and the frequency of such actions compared to the general player pool. How "Player A" was exposed: behavioral analysis At first glance, it’s extremely difficult to realize you’re up against a superuser at the table. If a hand doesn’t go to showdown, no one sees the opponent’s cards, and it may seem like the player is just lucky or has phenomenal intuition. However, the poker room has a key advantage: it can see all the cards, even if they weren’t revealed at showdown. This allows for the analysis of every hand and comparison of the player’s decisions with their possibilities and statistics across the entire database. In the case of "Player A," three key indicators were identified that, taken together, pointed to cheating: Absolute accuracy in difficult situations — the player always made the optimal decision, even when it went against the logic of most players. Lightning-fast decision-making — no more than two seconds to think, even in the most controversial spots. Repetition — similar actions were recorded over 757 hands, and almost all of them were played against the same opponent. If only one of these signs were present, it could be attributed to luck or a unique playing style. But the simultaneous presence of all three factors over such a long sample is almost impossible to explain without access to opponents’ cards. That’s why detecting superusers is the direct responsibility of the poker room, not individual players. No hacking or third-party software is needed: it’s enough to analyze existing hand histories and compare them with the typical behavior of honest players. John Andress, who leads the anti-fraud team, described the methodology for detecting superusers in detail in a special report on the investigation’s results. What to do if you suspect a superuser If you suspect someone at the table is cheating, it’s important to act wisely. Here are three main steps to help protect yourself and the community: Save your hand histories — this is your main tool for gathering evidence. Hand histories allow you to analyze questionable situations and provide objective data to the security team. Don’t start public arguments at the table . Instead of accusing your opponent in chat, contact the poker room’s security team directly. Only they have access to all the information, including hidden cards and player statistics. Use only official software . Don’t install third-party or suspicious programs for game analysis — there have already been cases in online poker history where malicious apps allowed cheaters to spy on players’ screens. If you’re sure you could fold pocket aces in two seconds — try offering this test to your friends. And to learn about other types of cheating, we recommend reading "Four Cheater Archetypes Every Online Poker Player Should Know." Real case: the hands that exposed the superuser As part of the AceGuardian investigation, 757 hands played by "Player A" were analyzed. Of these, 72 were flagged as suspicious. Four hands were selected to illustrate the case, in which the player acted with incredible accuracy and speed. Unfortunately, detailed hand histories for these hands are not publicly available, but it is known that in each of them "Player A" made tough decisions (such as folding strong hands) in just two seconds and was always correct. This prompted a deeper investigation and the subsequent detection of cheating. The AceGuardian system proved its effectiveness in such cases, where human factors could hardly explain what was happening. Investigation results table The original source provides the following statistics for the "Player A" case: Total number of hands analyzed: 757 Number of suspicious hands flagged by the system: 72 Number of key hands selected for analysis: 4 Average decision time in these hands: 2 seconds Decision accuracy: 100% (the player was correct all four times) Unfortunately, the names of other participants, prize amounts, buy-ins, stack sizes, and detailed tournament information are not provided in the original source. What this means for PPPoker club players For members of PPPoker clubs, this story is an important reminder of the need for vigilance and a smart approach to security. Even if everything seems fair at the table, always save your hand histories: they can become key evidence in a disputed situation. Don’t rely solely on your own feelings — only analysis of large amounts of data can reveal systematic violations. If you encounter suspicious behavior from an opponent, don’t try to resolve the issue yourself or publicly accuse anyone in chat. It’s much more effective to contact the club administration or platform support: they have access to all the information needed for an objective investigation. Finally, always download poker software only from official sources and don’t use third-party programs that could compromise your security. Modern systems like AceGuardian prove that even complex cheating schemes can be detected and stopped if all community members follow simple cybersecurity rules and cooperate with the platform’s administration.