Part III: Slot Machine Cheating · Electronic & Digital Cheating Methods

SCAM #17: Pretexting as Gaming Technician/Maintenance Worker

How it works

Social engineers pose as authorized slot machine technicians, gaming regulator inspectors, or vendor maintenance personnel to gain physical access to slot machines. Using convincing uniforms, forged credentials, fake work orders, and technical jargon, they persuade casino staff to grant them unsupervised access to gaming machines. Once inside the machine, they can: (1) install malware via USB ports, (2) swap EPROM chips with modified versions, (3) install wireless communication devices for remote access, (4) photograph internal components for later reverse-engineering, (5) plant keystroke loggers or network taps. The attack exploits the trust relationship between casinos and their vendors/inspectors, and the complexity of casino operations where staff may not personally know all legitimate technicians.

Where it appears

Slot machines on the gaming floor, particularly in areas with lower supervision or during off-peak hours when fewer staff are present

On the record

Social engineering attacks on casinos have been documented across multiple jurisdictions. In Europe, fraudsters using pretexting to gain access to electronic gaming machines operated undetected for months, costing casinos millions. The MGM Resorts 2023 attack began with social engineering of the IT help desk. Casinos’ customer-service-focused culture sometimes makes staff reluctant to challenge individuals who appear authoritative.

Published as a detection reference for surveillance, compliance and gaming-operations professionals. Thresholds and tuning are set by the property. Nothing here is instruction — the method is described so it can be recognised.