A player at a virtual table cannot watch the dealer shuffle or study the faces of the people in the other seats, so everything a live card room shows by sight has to be proven another way. Regulated platforms answer that gap with software. In 2023 one large operator closed 161 accounts for using bots or real-time assistance programs and refunded $362,893 to 4,068 players who had played against them, which took its refunds since 2021 past $1.2 million.
Fast-Fold Tables and Hand Volume
A standard online cash table deals roughly 60 to 80 hands per hour. Fast-fold formats draw every seated player from a shared pool, and a player who folds is moved at once to a new table with a new hand, which raises the count to between 200 and 400 hands per hour from a single table. Hole cards, betting rounds, hand rankings and pot splits work as they do at a standard table. Because the opponents change every hand, a player cannot build a history with any one of them and has to rely on the habits of the player pool as a whole.
Random Number Testing Under GLI-19
Cards on a regulated platform come from a random number generator, and regulators require an independent laboratory to test that generator before the software goes live. GLI-19, the interactive gaming standard published by Gaming Laboratories International, is one of the main benchmarks. Version 3.0 dates from July 2020, and a draft of version 4.0, released for public comment on July 7, 2026, gives random number generation a chapter of its own. The draft also moves technical security controls, including server and network security, into a separate framework.
A system that passes receives a certificate of compliance naming the version of the standard it was tested against, and certificates have a validity period, so the testing is repeated. The laboratory itself is accredited under ISO/IEC 17025, the international standard for testing laboratories, and under ISO/IEC 17065 as a product certification body, and it does that work on behalf of the regulators who license the operator. Suppliers often report results from the NIST and Diehard statistical test suites, which search long runs of generated numbers for patterns. A certified generator gives every player a deck that cannot be predicted from the cards already dealt.
Shared Player Pools Across State Lines
Online poker in the United States is licensed state by state, and players in one state normally sit only with players in the same state. A small state has trouble filling tables at every stake and hour on its own. The Multi-State Internet Gaming Agreement lets licensed operators combine players from member states into a single pool, and for players that means online poker games with more opponents and larger tournament prize pools at the same buy-ins.
Pennsylvania became the sixth member when Governor Josh Shapiro signed the state into the agreement in April 2025, joining Nevada, Delaware, New Jersey, Michigan and West Virginia. Nevada and Delaware started the compact in 2014, New Jersey signed on in October 2017, Michigan followed in May 2022 and West Virginia in November 2023. Shared play in Pennsylvania began on April 28, and the combined market now covers more than 38 million residents. Pennsylvania alone has an estimated 150,000 online poker players, and before it joined, it was the only state with regulated online poker that was outside the agreement.
Pennsylvania’s delay traced back to a 2019 Justice Department opinion, which reinterpreted the federal Wire Act to cover any form of gambling that crosses state lines, reversing a 2011 position after which Nevada, New Jersey and Delaware legalized online play and agreed to share players. Pennsylvania held back while the question remained open, and Shapiro directed regulators to restart the process in October 2024.
Detection of Bots and Assistance Software
Bots play without a person at the keyboard, and real-time assistance programs feed a human player solver advice during a hand. Regulated platforms ban both. Assistance software is harder to spot than a full bot, because a person still makes every click and the timing of each decision looks human. Security teams scan devices for known automation tools and for programs that read the client’s memory, and they review hand histories for decisions no human would produce. An account is usually flagged when several independent signals point the same way, since a bot run from a separate computer through a capture card can avoid a device scan.
Analysts at Morgan Stanley warned in September 2019 that superhuman AI bots threatened online card rooms, because the format depends on players trusting the system and recreational players supply most of the revenue. An operator that loses that trust loses the players who keep its tables full.
The operator behind the 2023 refunds credited its detection systems, tips from its own players and outside advisors who analyze hand histories for non-human patterns.
Location Checks at the State Line
Federal law and state licenses limit play to people physically inside a licensed state, and geolocation services establish that by combining GPS, Wi-Fi network mapping, cell tower data and IP analysis. GPS is more reliable outdoors, and Wi-Fi mapping performs better indoors, where satellite signals are weak. Operators pay for these checks because federal law can treat a wager sent across a state line as a felony.
In 2019 New Jersey, which borders New York City, took more than $4 billion in sports bets, more than 80% of them online, and much of the mobile betting happened near New Jersey’s train stations outside New York City, where New Yorkers came to place wagers before riding home. One leading operator said that about 22% of its mobile customers in the state were New York residents. Location data from the early years of New Jersey’s online market showed about 44% of users appearing within 2 miles of the state line, and in some metro areas the distance between a permitted position and a blocked one is a few hundred yards. A vendor testifying to state lawmakers said that each check runs through more than 350 analytical tests before a session is approved or denied. One major geolocation vendor reports processing between 1 billion and 1.2 billion location checks each month, and VPNs and GPS-spoofing apps remain the main methods people use to get around those checks.
Third-Party Checks Behind Each Hand
On a regulated platform, improved gameplay is a set of conditions that someone other than the player has checked. The deck comes from a tested generator, the opponents have passed device scans and location checks, and the player pool is large enough to fill tables at most hours because state regulators agreed to share it. Faster formats are an extra option for players who want more hands per hour.
