GGPoker announced new security rules for its Ontario poker service on October 15, 2026. The operator now prohibits third-party poker software and automation tools. It has also added optional protections against screen capture, remote access and suspicious network activity.

The measures follow what GGPoker described as a security incident involving compromised poker tools. The company has not established that any Ontario player cheated or that the alleged activity occurred in Ontario's ring-fenced player pool.

For Ontario players, the immediate change is clear: prohibited applications must be closed before the GGPoker client is launched.

What changes for Ontario players

Players must fully close prohibited applications before opening the GGPoker client. The list includes:

  • PokerTracker 4
  • Holdem Manager 3
  • Jurojin
  • Intuitive Tables
  • Hand2Note
  • StarsCaption
  • DriveHUD 2
  • Lobbyze
  • Equilab
  • AutoHotkey and other automation software

GGPoker said its previous policy allowed some tools that did not directly affect play. It has now ended that distinction. The operator cited the risk that outside applications could access game data, interact with tables or expose player information.

Four optional client protections

GGPoker's new Client Security section offers four optional controls. They run only while the GGPoker software is open.

  • Screen Guard blocks screenshots, recordings, screen sharing and remote viewing of poker tables. Players can extend the protection to the lobby, cashier and account pages.
  • Connection Monitor flags suspicious connections, including possible remote-control tools or proxies.
  • Process Check lets players identify applications running on their computers and mark trusted programs.
  • DNS Check looks for signs of possible DNS hijacking.

The controls are designed to protect game information and account details. They do not replace antivirus software or secure the entire computer.

System will look for abnormal decisions

GGPoker has also introduced Win-Rate Anomaly Detection. The system reviews decisions against the cards opponents actually held. It looks for unusually accurate play that would be difficult to explain through ordinary skill alone.

The operator said the method identified past cases during testing. It described the system as an additional layer alongside existing checks for collusion, ghosting, bots and real-time assistance.

What GGPoker says about the incident

GGPoker said it traced funds connected to the incident and identified a cryptocurrency wallet address. It reported the wallet information to Coinbase, industry networks that track illicit funds and law-enforcement authorities.

That statement does not establish a finding against an Ontario player. An analysis published by OntarioPoker.com said the publicly discussed cases appeared to involve international high-stakes games rather than Ontario's regulated player pool.

GGPoker's Ontario service is limited to people aged 19 or older who are physically located in Ontario. Its terms also require location monitoring while players use the service.

What players should do now

The policy shifts more responsibility onto GGPoker to control what can run beside its client. It also creates a practical burden for players who used tracking databases or table-management tools to study their own results.

GGPoker said its built-in features, including Smart HUD and PokerCraft, are not affected. Support for Windows 7, Windows 8, Windows 8.1 and macOS 11 or earlier will end in 2027.

Ontario players can reduce immediate account and device risks by following this checklist:

  • Update the operating system.
  • Inspect installed applications.
  • Remove unfamiliar remote-access software.
  • Run a full security scan.
  • Enable two-factor authentication.
  • Use passkeys and a separate fund password for withdrawals or transfers.

The result is a stricter boundary around the poker client. Tools that were previously tolerated because they did not directly affect play are now covered by the ban.