Online Poker's New 'Superuser' Scandal: What It Means for US Grinders on ACR, GGPoker, and ClubGG

A New 'Superuser' Scare Hits Online Poker

Online poker's history has a dark chapter involving insiders who could see opponents' hole cards. This week, a new version of that nightmare resurfaced. Several high-stakes online poker players reported being targeted by a sophisticated cyber-attack that allowed a cheater to secretly view their computer screens, and their hole cards, in real time.

The mechanism wasn't a backdoor built into a poker client, as in the infamous 2007-08 cases. Instead, the attacker is believed to have compromised third-party software used by high-volume online players to organize multiple poker tables, install hotkeys, and manage other aspects of their games. Jurojin Poker, one of the software providers affected, acknowledged that an attacker was able to intermittently replace updates sent to a select group of users with tampered versions containing remote-access software.

Who Was Targeted, and How Much Was Lost

Reports tie the scheme to an account using the name "Paul Gregg." The account allegedly used third-party software to view opponents' hole cards, and it targeted around 30 high-stakes players, costing victims six figures. One affected pro said the losses were steep: a high-stakes player claims he lost between $100,000 and $200,000 against the suspect account, including about $60,000 in a single 15-minute session.

The story gets messier from there. New reports in the online poker superuser scandal say that two online poker sites were previously alerted about a suspicious account cheating players. One operator moved quickly: CoinPoker ambassador Patrick Leonard said the crypto poker site had earlier banned an account called "Europe," registered in Paul Gregg's name, confiscating more than $100,000 and repaying affected players. Notably, poker coach Patrick Howard reportedly sent GGPoker an analysis in September pointing to unusual results and asked the company to investigate, though without directly accusing the player of cheating.

On the defensive side, at least one US-facing room is responding publicly: ACR Poker developed a "Screen Shield" designed to hide its tables from screen-capture and screen-sharing programs.

Why This Matters for American Grinders

GGPoker's club-based ecosystem, including ClubGG, is enormously popular with US players precisely because it exists in a regulatory gray zone outside state-by-state online poker licensing. ACR has long served the same role for Americans in states without regulated sites. That's exactly why a scandal involving third-party table-management tools and allegations that at least one major operator sat on a warning should put every US grinder on alert, regardless of which network they play.

The takeaway isn't that every club app or offshore room is compromised. It's that the honor-system nature of unregulated and semi-regulated poker, where there's no state gaming commission auditing RNGs or investigating superuser claims, means players have to be their own first line of defense.

What US Players Can Actually Do

• Vet third-party tools carefully. If a hotkey manager, table-tiler, or HUD-adjacent app isn't from a source you trust, think twice before installing it, especially if you play meaningful stakes.
• Watch your own numbers closely. A sudden, unexplainable shift in your win rate against a specific opponent is worth investigating rather than shrugging off as variance.
• Keep clean, independent records. If a dispute ever arises with an operator, your own hand history archive and session notes are the only proof you control.

This last point is where disciplined tracking earns its keep. Since ClubGG doesn't let you run software during play, the only realistic way to audit your results, spot suspicious patterns, or flag a run of hands that feels off is to review everything after the fact. A proper ClubGG tracker imports your real hand histories into DriveHUD so you can see win rate, equity, and session graphs with actual numbers instead of gut feel. If you haven't set that up yet, the setup guide walks through the process in a few minutes.

The Bottom Line

Scandals like this one surface every so often, and they rarely end cleanly. What's clear is that trust in any poker platform, licensed or not, works best when it's backed by your own data, not just an operator's word. Keep your software stack lean, your record-keeping tight, and your eyes on your own graph.