Part III: Slot Machine Cheating · Electronic & Digital Cheating Methods

SCAM #1: Russian Slot Machine PRNG Reverse-Engineering Hack

How it works

A criminal organization based in St. Petersburg, Russia, acquired Aristocrat Mark VI and Novomatic slot machines (after Russian casino gambling was banned in 2009) and systematically reverse-engineered their Pseudo-Random Number Generators (PRNGs). By dismantling the machines and analyzing the source code, they cracked the mathematical algorithms governing outcomes. Operatives in target casinos would use smartphones to record approximately two dozen spins and transmit the footage to St. Petersburg. The technical team would analyze the video to determine the machine’s internal state based on their knowledge of the PRNG algorithm. They would then calculate precisely when a winning spin would occur and transmit timing markers to a custom app on the operative’s phone. The phone would vibrate approximately 0.25 seconds before the operative should press the spin button, accounting for human reaction time. This attack did not require any physical modification to the machine.

Where it appears

Aristocrat Mark VI cabinets, Novomatic machines — primarily older-model slots in casinos across the United States, Europe, and South America

On the record

First documented around 2014-2017. Wired published a detailed expose in February 2017. Four operatives were arrested on federal charges in Missouri and Illinois. Losses estimated in the tens of millions across multiple casino operators worldwide. The Aristocrat Mark VI used a 32-bit PRNG that was no longer in production, making it particularly vulnerable.

Published as a detection reference for surveillance, compliance and gaming-operations professionals. Thresholds and tuning are set by the property. Nothing here is instruction — the method is described so it can be recognised.