Hacking Slot Machines Until They Got Caught: The Engineer Who Stole Millions

[00:03] Lumier Plus casino, a man in a black zip-up jacket stands next to a slot machine. His hand hovers over the slot machine. His hand hovers over the spin button as his phone

[00:18] spin button as his phone discreetly records moments later—jackpot. This is unprecedented. This was the biggest scandal had ever witnessed. But he doesn't

[00:33] react. Instead, he collects his winnings and moves on to the next winnings and moves on to the next machine. No celebration, no hesitation, just precision. What the security personnel don't know is that he isn't

[00:49] gambling; he's executing a plan—a plan that has siphoned millions of dollars from slot machines worldwide. But how are they doing it, and

[01:02] more importantly, can they be stopped? What follows is a true story of What follows is a true story of ingenuity, deception, and the downfall of a ingenuity, deception, and the downfall of a mastermind. In early 2009, Russia

[01:16] bans gambling overnight, closing thousands of casinos and slot machines. What was once a multi-billion-dollar industry is now just worthless junk sold wholesale. One of those machines ends up in St.

[01:34] Petersburg in the hands of Murat BVE, a former software engineer and tech enthusiast. He's a gambler, not interested in casinos or the system. But he

[01:46] has a passion for software and engineering. Out of curiosity, he takes apart a slot machine on his kitchen table, studies its circuits, and breaks down kitchen table, studies its circuits, and breaks down its code. He's determined to understand

[02:01] how it works, and that's when he discovers it: slot machines aren't truly random. They can't be because each outcome is determined by a pseudo-random number generator (

[02:19] PRNG), an algorithm designed to create the illusion of randomness at its core. A PRNG starts with randomness at its core. A PRNG starts with an initial set of seed numbers and

[02:34] combines them with a series of hidden inputs, like the slot machine's internal clock. hidden inputs, like the slot machine's internal clock. In theory, it's unbreakable, but Bliv believes he's found a flaw. With enough

[02:47] spins, he thinks he can reverse-engineer the code and determine exactly when a slot machine is programmed to pay out the jackpot. What begins as curiosity becomes

[03:02] a formula and then an obsession. He tells his closest friend, obsession. He tells his closest friend, another engineer and part-time hacker. It isn't long before a small group of mavericks

[03:18] is examining thousands of slot machine spins in their... With free time, slot machine spins in their... With free time, eager to perfect their algorithmic understanding, they need to create a custom software application. The

[03:33] application will record recent results and hopefully tell them recent results and hopefully tell them exactly when to hit the exactly when to hit the spin button. Their plan is audacious. Armed with

[03:47] smartphones, strategy, and information, they want to hack the system and make casinos pay out worldwide. If they succeed, they'll be ready

[04:01] worldwide. If they succeed, they'll be ready by 2011. Theory is no longer enough. by 2011. Theory is no longer enough. Murat B and his team are ready. They crave Murat B and his team are ready. They crave real casinos, real money, and

[04:13] real casinos, real money, and real wins. The first test takes place in Eastern Europe, focusing on older machines like the Aristocrat Mark and the Novamatic Cool. B poses as a

[04:28] casual player, discreetly recording the spins on his smartphone. Now, casinos are equipped with state-of-the-art surveillance technology: equipped with state-of-the-art surveillance technology:

[04:43] and zoom cameras in every corner of the floor, and facial recognition software detects known winners as soon as they enter the casino. But the system has a weakness: it still relies on human surveillance. B is fully

[05:01] aware of this. He carefully collects data from 20 to 30 spins and uploads the recordings to San In St. Petersburg, the blive team analyzes the data through their software. The

[05:16] algorithm calculates when the slot machine is expected to pay out, and blive the slot machine is expected to pay out, and blive receives a confirmation via text message. There's a 97% probability of a

[05:32] maximum payout. The results are astonishing: small bets of 20 to 30 soon become hundreds and then thousands. The system works, confidence

[05:45] grows, and within weeks, so does their their ambition. Soon after, they expand their operations beyond Eastern Europe, targeting casinos in Macau, Singapore, and the

[05:59] targeting casinos in Macau, Singapore, and the United States. Each operative follows strict protocols; they never take more than 10,000 from a slot machine, they rotate between casinos, and they act as

[06:15] regular players. But the operation isn't perfect. Recording discreetly proves more difficult than expected. Occasionally,

[06:27] casino security starts noting players who hesitate for long periods before who hesitate for long periods before pressing the spin button. In some cases, internet connectivity problems disrupt their

[06:41] synchronization. As technology improves, the blive team adapts, but with each new success, the risk increases. They are winning big, but they increases. They are winning big, but they leave a trail of evidence in their wake.

[06:56] leave a trail of evidence in their wake. By 2012, the Murat's network is siphoning millions from the world's biggest casinos in Las Vegas, Atlantic City, and London. They're Las Vegas, Atlantic City, and London. They're everywhere, yet

[07:11] cracks are starting to show. In Romania, a team member lingers too long by a machine without playing. Casino security follows him closely, causing panic. He leaves the casino

[07:28] panic. He leaves the casino empty-handed and with a bruised face. In Prague, a bigger problem arises during a maximum bet. An operator follows the algorithm's instructions, but the confirmation messages are slow to

[07:43] arrive and then all arrive at once. As a result, a flurry of high bets causes them to lose thousands of dollars in dollars in seconds. Worse still, the player explodes in

[07:57] frustration. n't just annoyances; they're becoming dangerous. Las Vegas casinos

[08:11] begin sharing reports about unusual betting patterns, and unusual betting patterns, and security teams become increasingly security teams become increasingly vigilant. In response, Bli further reinforces

[08:24] vigilant. In response, Bli further reinforces disguise their activities by casually chatting with players and employees. No machine should be played for more than $

[08:38] 100,000. Activities must be spread across multiple casinos to avoid across multiple casinos to avoid detection. Despite their efforts, the Casino surveillance increases. A floor manager in Macau notices one of the

[08:53] players suddenly adjusting his phone in his pocket while gambling. Suspicious, the security team corners him for questioning. Sensing danger, the player flees, though they fail to

[09:09] capture him. The incident is recorded, and the security camera footage is distributed among the casino community. Blive always knew

[09:21] the casinos were watching them. But this time, they're not just being watched; they're being hunted. By 2013, Blive's operation is running

[09:33] at full capacity. Its network has operatives in Europe, Asia, and North America. Most exploit vulnerable slot machines to make big profits in Las Vegas. However,

[09:49] system delays—recording spins, uploading images, and waiting for signals—become a waiting for signals—become a disadvantage. Blive knows it needs a faster system. Back in St. Petersburg, the team focuses on a new strategy:

[10:07] team focuses on a new strategy: real-time streaming. This idea will completely eliminate delays. Now, instead of uploading delays. Now, instead of uploading recordings, he and his team will stream

[10:20] their spins live directly to the network via via Skype. The algorithm will analyze the data instantly and send the precise signals to press the button in a

[10:33] precise signals to press the button in a matter of seconds. The results are revolutionary. With the new system and improvements to its algorithm, the Russian operatives can now predict payouts with near-

[10:47] payouts with near- perfect accuracy in real time, without delays, lost signals, or errors. With their efficiency doubled, they redouble their efforts. The MGM Grand, Benian, and Win Casino

[11:04] become their main targets. In just one week, a four-person team in Las Vegas earns $

[11:17] system, the greater the risks. Now, the operatives must keep their phones constantly transmitting without being detected.

[11:30] BLI modifies its strategy. The phones are hidden in mesh-lined pockets to record discreetly. They rotate even faster between machines, never staying more than 15 minutes on each one. At first, these

[11:47] minutes on each one. At first, these adjustments keep them under the radar, but the network's growing success also makes them reckless and careless while reviewing the recordings. Casino security

[12:01] detects a team member repeatedly adjusting the position of his phone in his pocket while playing. This time, his cover is blown.

[12:14] The Nevada Gaming Control Board is already after them, and they are now known as the Russian Slot Machine Hackers. He knows time is running out, but what he doesn't know is that

[12:30] federal agents are also on his trail. Surveillance footage from several casinos across the United States reveals disturbingly consistent betting patterns: large wins on

[12:45] consistent betting patterns: large wins on spins, and a small group of individuals repeatedly appearing in different cities. One name stands out among them all:

[13:04] Louisiana casino surveillance expert, is the first to connect the dots. He shares his findings with the State Gaming Commission, and soon authorities trace Blev's movements through an unexpected means: car rental records

[13:20] and flight passenger lists. These confirm that he flies to different cities, hits several casinos, and disappears without a trace. They know who he is, but they must

[13:35] catch him in the act and prove it. By December 2014, Murat BVE is back in the United States. Despite growing suspicion and tense moments, he refuses to

[13:50] stop. His network continues to amass money, and the FBI still doesn't understand exactly how they're doing it. Blev arrives in Missouri with three of his Blev arrives in Missouri with three of his best operatives. Their target: the

[14:05] casinos of St. Louis and Illinois. The reason: these casinos are known For housing vulnerable Aristocrat Mark slot machines, Aristocrat Mark slot machines, they work like ghosts for days,

[14:20] playing the machines, accumulating thousands of dollars, and moving between casinos without raising alarms. Their real-time transmission system is more advanced than ever; the signals

[14:35] are perfect, and the wins seem almost automatic. The plan works in three simple steps: the operative broadcasts simple steps: the operative broadcasts live spins from a target machine

[14:49] using a smartphone. The more spin data they collect, the better. The video is sent to St. Petersburg, where the algorithm analyzes the behavior of the machine's pseudo-random number generator (

[15:05] PRNG), identifying its seed numbers in a matter of minutes. The algorithm reverses the code, synchronizes with the machine's behavior, synchronizes with the machine's behavior, and sends a vibration alert

[15:20] to the operator's phone, which is discreetly tucked into their shirt pocket. All they have to do is shirt pocket. All they have to do is press the spin button at the

[15:33] exact moment, except this time it's different. Law enforcement, alerted by the car rental company, has been silently tracking their movements across the

[15:51] definitely against them. The Hollywood Casino in St. Louis is bustling with activity, unaware of what's about to happen. The operation continues, he unaware of what's about to happen. The operation continues, he

[16:05] slot machine's activity, waits for the signal, presses the spin button, collects another jackpot. He does n't react; he's calm, n't react; he's calm, controlled, methodical. He's done it thousands of

[16:20] times before. He heads to the next slot machine, but he never machine, but he never arrives. "Sir, we need to speak with you." arrives. "Sir, we need to speak with you." Two plainclothes FBI agents stand

[16:33] Two plainclothes FBI agents stand in his way. Blive looks up, his face expressionless. His mind races. Do they know something? Have they discovered him? Or is it just a

[16:47] routine check? Across town, at a St. Charles casino, another operative isn't so lucky. Security guards surround her, confiscating her phone and cash. She doesn't even try to

[17:04] defend herself. Meanwhile, across the river in Illinois, two more operatives are arrested mid- session. Their winnings are seized, and

[17:16] their phones are collected as evidence. Back at the Hollywood Casino, Blive tries to maintain his composure. Maybe they don't have enough evidence. Maybe he'll get away with it. How much evidence could they really have?

[17:33] Murat Blive and three of his operatives are arrested and charged with cheating on slot machines at 10 casinos. Faced with an overwhelming amount

[17:46] of evidence, they accept a plea deal. Prosecutor Blev is sentenced to two years in federal prison followed by deportation. One of his team members, hoping for a lighter sentence, cooperates with

[18:03] authorities, revealing key details about the network's operations. about the network's operations. But it doesn't matter; the team in Russia But it doesn't matter; the team in Russia remains untouched, and 90% of the money has

[18:15] already been laundered. Even with the arrests, the operation doesn't die. Within months, similar scams are identified in casinos around the world,

[18:27] from Peru to Singapore. Their techniques evolve alongside technological advances; the network is always one step ahead for casinos. The simplest solution would be to

[18:42] replace the old machines. For many, it's cheaper to improve surveillance and track players instead of risking a bad reputation. Casinos present it as

[18:56] an isolated case of fraud, but the truth is that the losses don't come out of the casino's pocket; they come out of yours. The odds on slot machines are adjusted, payout rates are reduced, and ordinary players—

[19:15] those who never had a real chance to win—are the ones who pay chance to win—are the ones who pay the price.