GGPoker's ban on HUDs and third-party poker software is the biggest rule change the online poker world has seen in years. Following the "superuser" scandal, in which high-stakes players were allegedly targeted through covert remote screen access, GGPoker announced five security measures this week. The headline item is a blanket prohibition on third-party tools that run alongside its client, including the tracking programs that countless regulars and professionals rely on. Add a new anomaly-detection system, optional anti-spying features and the end of legacy operating system support, and the package amounts to a redesign of how GGPoker thinks about client security. Here is what was announced, who is affected, and how to prepare.
What GGPoker announced
According to reporting from Poker.org, the five measures are a ban on third-party software, Win-Rate Anomaly Detection, the end of legacy operating system support in 2027, support for victims and the community, and a new Security section in the client with four optional tools.
The software ban
GGPoker will no longer allow third-party poker software that runs alongside its client, including HUDs and automation tools. Poker.org reports the site previously exempted some tools it judged did not affect gameplay. Its new position is that every use of such software is another point where player information can be exposed.
The tools named include Jurojin Poker, PokerTracker 4, Hand2Note, Holdem Manager 3, StarsCaption, DriveHUD 2, IntuitiveTables, Lobbyze, Equilab and AutoHotkey, plus "other software and automation tools." Players are expected to close these before launching the GGPoker client. Further details sit in GGPoker's Security Ecology Policy.
The practical reach is wide. Poker.org notes the ban will likely hit honest players as well as cheats, covering bankroll tracking, hand history review, opponent-stat HUDs and multi-tabling shortcuts.
Win-Rate Anomaly Detection
The second measure is Win-Rate Anomaly Detection, or WAD. It looks for players whose decisions are correct more often than honest humans could plausibly manage, which could indicate knowledge of hole cards. GGPoker says it tested WAD against previously confirmed cases and that it identified them. Poker.org points out that existing methods already catch real-time assistance and that it is unclear how WAD differs, so expect questions about false positives and appeal processes.
The end of legacy systems
From 2027, GGPoker will withdraw support for operating systems that no longer receive security patches: macOS 11 (Big Sur) and earlier, and Windows 7 and 8.1. The minimum becomes Windows 10 or macOS 12 (Monterey).
The new Security section
A client update, described as coming "soon" with no firm date, will add a Security option under Game Settings. All four features are optional and run only while the GGPoker software is open:
- Screen Guard blocks remote-access viewing of all tables, specific tables or the whole client. Specific tables can still be shared, for example with a backer.
- Connection Monitor sends automated alerts for suspicious connections such as remote-control tools.
- Process Check lets players exempt certain apps from those alerts.
- DNS Check scans the network for signs that DNS has been compromised.
Victim support
GGPoker also says it traced the funds in the superuser case and identified the crypto wallet address involved, then shared it with Coinbase, where the funds were believed to have been deposited, and asked for the account to be restricted. It pledged continued cooperation with authorities.
Why GGPoker went this far
The backdrop is the scandal we covered in our report on the Jurojin apology and the broader poker software hack story. Two widely used tools, Jurojin and IntuitiveTables, were reportedly compromised in ways that allowed remote viewing of players' screens. Poker.org says both developers have published guidance for users to check their machines and have patched the relevant flaws.
From a security engineer's perspective, GGPoker's logic is easy to follow. A blanket ban is simpler to enforce than a whitelist that has to be re-audited every time a developer ships an update. Every approved tool is a potential attack surface and a potential argument. Removing the category removes the debate.
But there is a cost, and it falls on the people who did nothing wrong.
The pushback
Jurojin Poker called the blanket ban "heavy-handed" and said tools should not be restricted regardless of what they do, expressing hope GGPoker will reconsider. It called for cooperation between operators and developers built on "clear security standards" and "open communication."
That is a fair point from a vendor with an obvious interest, but it is also what many players have been saying since the scandal broke: the industry lacks shared standards, and cheater information is not shared between sites. Poker.org notes that cooperation between operators still seems some way off. Compare this with competitors: ACR Poker responded to the same scandal with its own screen-protection feature, covered in our ACR ScreenShield report, while CoinPoker has gone down the route of integrated tracking, which we discussed in our CoinPoker HUD story.
Who is hurt most
Recreational players are barely affected. The impact lands on regulars who track results, study their hand histories and use stats to exploit opponents, and on high-volume multi-tablers who depend on shortcut software to keep up with the action. Hand history review, in particular, is how serious players find leaks. Losing that workflow, or being forced to rely on whatever the client offers, is a real competitive change.
There is also a subtler effect on the player pool. Poker games have historically been shaped by information asymmetry. If trackers disappear, stat-based edges shrink for everyone on GGPoker, which may narrow the gap between regulars and weaker players. Whether that is good or bad depends on which side of the table you sit.
What this means for players
If you play on GGPoker, take these steps:
- Read the Security Ecology Policy and confirm which of your tools are on the banned list before your next session.
- Close all listed software before launching the client; do not assume a tool is safe because it was tolerated before.
- Make sure your operating system is on a supported version before 2027.
- When the Security section arrives, consider turning on Screen Guard, particularly if you share tables with a backer or use remote access tools elsewhere.
- Use strong account protection. GGPoker's own advice, per the announcement, includes two-factor authentication, passkeys and Fund Password protection.
If you rely on tracking for your edge, our guide to cash games and poker strategy can help you rebuild study habits that do not depend on live HUD data, and our companion piece on playing without a HUD walks through concrete adjustments.
The bigger picture
This week's announcement will be judged by execution. A ban is only as good as the detection behind it, and GGPoker has not explained how it will identify banned software running on a player's machine beyond the optional process checks. Players will want to know what happens to those who are flagged, whether appeals exist, and how WAD avoids punishing skilled but honest players.
Whatever the answers, the direction of travel is clear. After a scandal that exposed real money and real trust, the largest operator in online poker has decided that client integrity trumps convenience. Other sites will watch the player reaction closely, and anyone choosing where to play should compare policies as carefully as bonuses. Our safe poker sites page is a good place to begin.