Every so often, a poker operator announces that it has permanently banned dozens of accounts in one go. Players call it a ban wave. To the people who run the platform, it is the visible end of a process that usually took weeks or months. The moment accounts disappear is the last step, not the first.
This article explains how that process works: what makes an operator wait, why bots tend to be caught as groups rather than individuals, and what happens to the money afterward. Two recent, publicly reported cases are used as real reference points, and the rest is described in general terms.
What Triggers a “Ban Wave”
A ban wave is not a single event. It is what happens when an operator decides it has gathered enough evidence on a whole cluster of related accounts and acts on all of them together.
Here is how a typical one unfolds. This is an illustrative scenario, not a description of any one real incident. A security team notices a handful of accounts whose play looks unusual. Rather than banning them immediately, analysts begin looking for other accounts that resemble them: similar session patterns, similar decision profiles, similar technical footprints. Over time, the list grows from a few accounts to dozens. Once the team is confident each account meets the standard of evidence, and that the cluster is as complete as it is likely to get, enforcement happens in one coordinated action.
That is why ban waves feel sudden from the outside. The visible action is quick. The investigation behind it was not.
The Detection Signals That Add Up
Operators rarely rely on one clue. Detection generally draws on three broad families of evidence, and the strength comes from combining them.
Behavioral signals describe how an account acts: how long it takes to make decisions, how consistent those timings are, how long it plays without breaks, and how it reacts to unusual situations. Human play is uneven. Automated play often is not.
Statistical signals describe what an account does over thousands of hands. Operators can compare an account’s decisions against what a strong, solver-based strategy would do, and look for results or patterns that are hard to explain by ordinary play. A single hand proves nothing; a very large sample can say a lot.
Network and device signals describe the technical setting around an account: shared devices, overlapping connection details, and links between accounts that should have nothing to do with each other.
On their own, any one of these can have an innocent explanation. A fast player is not necessarily a bot, and two players can share a household connection. The signals become meaningful when they line up. And they line up most clearly across many accounts, because a bot operation rarely runs a single account. When several accounts share behavioral fingerprints and statistical profiles and technical links, the picture stops looking like coincidence and starts looking like a ring.
Why Bots Get Caught in Batches, Not One at a Time
The batching is deliberate, and the logic is strategic.
If an operator bans the first suspicious account it finds, whoever is running the operation learns something: that account was detected, and the others may be next. Remaining accounts can be shut down, moved, or changed before the platform ever sees them. A ring that could have been removed completely is reduced to one lost account.
Waiting avoids that. By building a fuller picture first, the platform can act on the whole network at once, so there is less left to react. It also helps the quality of the evidence. A longer observation window means more hands, more sessions, and more cross-account links, which supports confident decisions and reduces the chance of banning a legitimate player by mistake.
Two publicly reported cases show what this looks like at scale.
In early 2026, CoinPoker announced it had permanently banned 98 bot accounts, confiscated their balances, and redistributed $156,446 to 1,360 players it said had been affected. According to the reports, most of the bots were found in cash games with buy-ins between $50 and $200. The company declined to explain how it detected them, saying that doing so would only help bot operators improve. (Sources: CoinPoker; SoMuchPoker.)
In 2025, WPT Global reported banning dozens of accounts between January and May for using third-party software, collusion, or real-time assistance tools, and said it confiscated $166,885 and redistributed it to affected players. It credited a combination of an AI-based detection system, a dedicated integrity team, solver technology, and player reports. (Source: RakeRace.)
Both examples are operator-reported figures, so they should be read as the companies’ own accounts rather than independently audited numbers. Even so, they show the same pattern: many accounts, one announcement, and funds going back to players rather than staying with the operator.
What Happens to Banned Accounts and Their Funds
The consequences follow a fairly consistent chain.
Balances are frozen first. Once an account is flagged for review, withdrawals are typically blocked while the investigation continues. Any funds on the account stay where they are.
Confirmed violations lead to permanent bans. Terms of service at most real-money platforms prohibit automated play, and the usual penalty is account closure with no return to the site.
Confiscated balances may be redistributed. In both cases above, the operators said funds taken from banned accounts went back to affected players. Practice varies between sites, and some do not publish what they do with confiscated money, so players should not assume every operator handles it the same way.
The damage can extend beyond one site. In serious cases, operators can share information with one another, and a ban at one platform can make it harder to open accounts elsewhere. How formal or widespread that sharing is differs by operator and jurisdiction, so it is best treated as a real possibility rather than a guaranteed outcome.
The practical result is that an account caught in a ban wave can lose its balance, its access, and some of its future options all at once.
What This Means for the Wider Player Pool
A ban wave can feel alarming. Seeing a headline about nearly a hundred bots on one site naturally raises the question of how many are still out there.
But the announcement itself is better read as evidence of a working system. A platform that never bans anyone has either no problem or no detection. A platform that finds, confirms, and removes bot networks, then compensates the players who lost money to them, is doing what players should want. In the CoinPoker case, the stated reason for redistribution was precisely that regular players had lost money to the bots.
There is also a longer-term benefit. Each large enforcement action raises the cost and risk of running a bot operation, and it protects the thing every recreational player depends on: confidence that the opponent across the table is a person.
Ban waves are disruptive. They are also a sign the ecosystem is being looked after.
Lessons for Anyone Tempted to Automate
The most important point about a ban wave is the one hidden inside the name: the detection is cumulative and retroactive.
Operators keep records. A pattern that looks unremarkable in a week of play may stand out clearly across a year of data. A technique that goes unnoticed today can be recognized later, by tools that did not exist when the hands were played. And because investigations link accounts together, a single exposed account can lead to others.
Going undetected for now therefore says very little about going undetected for good. The risk does not shrink with time; it accumulates. The accounts in a ban wave were, almost by definition, ones that had gone unnoticed until the platform was ready to act.
For anyone considering automation on a real-money platform, that should settle the question: it breaks the rules of the site, it puts every balance on the account at risk, and the evidence against it only grows. For anyone who simply wants to learn, practice, or experiment, the better route is an environment built for it, where no real money is at stake and no rules are being broken.