If you have ever posted "Is this game rigged?" on a poker forum, you are not alone. It is one of the most common questions in online poker communities. After a brutal string of bad beats, runner-runner suckouts, or seemingly impossible coolers, it is only natural to wonder whether the deck is actually being shuffled fairly.
Here is the thing: your suspicion is not irrational. It is actually a perfectly reasonable response to a system that asks you to trust it without giving you any way to verify that trust. And that is a design problem, not a player problem.
This article will walk you through how online poker shuffling actually works, why the current model is fundamentally broken from a trust perspective, and what technology exists today to fix it.
Why Players Suspect Games Are Rigged
Poker is a game of incomplete information played over long time horizons. Variance is brutal, and even seasoned professionals experience stretches where the math feels broken. So some of the "rigged" feeling is simply the nature of the game colliding with human psychology. We remember the bad beats far more vividly than the times we got lucky.
But there is a deeper reason the question keeps coming up, and it has nothing to do with tilt or confirmation bias. The reason is structural:
On most online poker platforms, you have absolutely no way to verify that the cards were shuffled fairly. You are trusting a black box.
When you sit down at a live game, you can see the dealer shuffle. You can cut the deck. There are cameras, floor staff, and physical randomness. Online, all of that disappears. The platform tells you the shuffle was random, and you either believe it or you do not. There is no middle ground and no way to check.
That gap between "we promise it's fair" and "here's proof it's fair" is exactly where distrust lives.
How Most Platforms Shuffle Cards
The standard approach for online poker platforms works like this:
- The server generates a random number using a random number generator (RNG).
- That random number seeds a shuffle algorithm that produces a deck ordering.
- Cards are dealt to players from that shuffled deck.
- The hand plays out.
The RNG is usually certified by a third-party testing lab. The platform publishes certificates saying their RNG has been audited. Everything looks legitimate on paper.
So what is the problem?
The problem is that the entire shuffle happens server-side, behind closed doors. The platform generates the random seed, runs the shuffle, and deals the cards. At no point does any player have visibility into, or influence over, the process. You are relying entirely on the operator's honesty and the integrity of their systems.
RNG certification tells you the random number generator can produce fair outcomes. It does not tell you whether the platform actually used it for your specific hand. There is no hand-level proof. No audit trail you can independently check. You just have to take their word for it.
The Core Problem: You Cannot Verify After the Fact
Imagine a dice game where someone rolls the dice behind a screen, looks at the result, and then tells you what it was. Even if they have a certificate saying their dice are regulation quality, would you trust that process? Most people would not, and they would be right to be skeptical.
That is essentially the model for online poker today. The critical missing piece is post-hoc verification -- the ability for any player to independently check, after a hand is over, that the shuffle was generated fairly and was not manipulated.
Without this capability, players are stuck in a trust dilemma:
- If you win, the game feels fine.
- If you lose, you have no way to distinguish between honest variance and manipulation.
- If the platform ever wanted to favor certain players, alter action, or manipulate outcomes, there would be no cryptographic evidence to catch them.
This is not an accusation. Most operators are probably running honest games. But "probably honest" is a terrible foundation for a game where real money is on the line.
What "Provably Fair" Actually Means
Provably fair is not a marketing term. It is a specific cryptographic concept that describes a system where fairness can be mathematically verified by any participant, without requiring trust in any central authority.
The core idea is simple: instead of the platform secretly generating a shuffle and asking you to trust it, the platform commits to the shuffle before the hand begins, in a way that it cannot change later. After the hand, it reveals the inputs so you can independently reproduce the shuffle and confirm it matches what was dealt.
If the platform tried to alter the shuffle mid-hand, the math would not check out. It is not about trusting people. It is about trusting mathematics.
Commitment Schemes: The Foundation of Trust
The mechanism that makes this possible is called a commitment scheme. It works in two phases:
Phase 1: Commit (Before the Hand)
Before any cards are dealt, the platform generates a random seed and uses it to produce a shuffled deck. But instead of just dealing from it, the platform publishes a cryptographic hash of the seed. This hash acts like a sealed envelope -- it locks in the shuffle without revealing what it is.
A hash is a one-way function. Given a seed, you can easily compute the hash. But given only the hash, you cannot reverse-engineer the seed. This means the platform has committed to a specific shuffle, and everyone at the table can see the commitment, but nobody knows the actual deck order yet.
Phase 2: Reveal (After the Hand)
After the hand is complete, the platform reveals the original seed. Now any player can:
- Hash the revealed seed and verify it matches the commitment published before the hand.
- Run the same shuffle algorithm with the revealed seed to reproduce the exact deck ordering.
- Confirm that the cards dealt during the hand match the reproduced deck.
If any of these checks fail, you have cryptographic proof that the platform cheated. If they all pass, you have mathematical certainty that the shuffle was fair and was determined before any cards were dealt.
Why This Matters
The commitment scheme means the platform cannot see how the hand will play out and then alter the shuffle to change the outcome. The shuffle is locked in before the first card is dealt. Period.
The Fisher-Yates Shuffle: How the Deck Gets Ordered
Once you have a random seed, you need a deterministic algorithm that turns that seed into a specific deck ordering. The standard for this is the Fisher-Yates shuffle (also called the Knuth shuffle), and it has been mathematically proven to produce a uniform random permutation -- every possible deck ordering is equally likely.
Here is how it works:
// Fisher-Yates shuffle
// Input: deck of 52 cards, a cryptographic seed
function shuffle(deck, seed) {
rng = createRNG(seed) // deterministic RNG from seed
for i = 51 down to 1:
j = rng.nextInt(0, i) // random index from 0 to i
swap(deck[i], deck[j]) // swap cards at positions i and j
return deck
}
Starting from the last card and working backward, the algorithm picks a random position from the remaining unshuffled cards and swaps. After 51 swaps, you have a complete, uniformly random permutation.
The critical property for provable fairness is that Fisher-Yates is deterministic: given the same seed, it will always produce exactly the same deck ordering. This is what makes independent verification possible. You do not need to trust the platform's copy of the deck. You can rebuild it yourself from the seed.
A note on RNG quality
The seed itself needs to come from a cryptographically secure source. A 256-bit seed provides 2256 possible deck orderings to choose from -- a number so large it dwarfs the total number of atoms in the observable universe. Combined with Fisher-Yates, this guarantees that the shuffle space is more than sufficient for a 52-card deck (which has 52! -- roughly 8 x 1067 -- possible orderings).
Why Blockchain Makes This Even More Trustworthy
Commitment schemes work without blockchain. But blockchain adds a layer that eliminates the last remaining trust assumption: what if the platform publishes a commitment and then claims it published a different one?
When commitments are stored on a blockchain, they become part of an immutable, publicly auditable record. The platform cannot retroactively alter or delete a commitment. Every hand gets a permanent, timestamped entry that anyone can inspect at any time.
This matters in three key ways:
- Immutability. Once a commitment is on-chain, it cannot be changed. Not by the platform, not by anyone. The math and the consensus mechanism guarantee it.
- Transparency. The full history of every shuffle commitment is publicly visible. Researchers, regulators, and players can all audit the same data. No special access required.
- Independence. Verification does not depend on the platform being online or cooperative. Even if the platform disappeared tomorrow, the on-chain record would still exist and still be verifiable.
Think of it as the difference between a platform keeping its own records (which it controls) versus having an independent notary stamp every shuffle commitment into a public ledger that nobody controls. Blockchain is that notary.
What to Look for When Choosing a Platform
Not all platforms are created equal when it comes to fairness guarantees. Here is a practical checklist for evaluating whether an online poker platform takes fairness seriously:
- Does it offer provably fair verification? This is the baseline. Can you independently verify each hand after it is played? If the answer is no, you are back to trusting a black box.
- Is the shuffle algorithm published? A trustworthy platform should tell you exactly which shuffle algorithm it uses and how the seed is generated. Fisher-Yates with a CSPRNG (cryptographically secure pseudo-random number generator) is the gold standard.
- Can you access the commitment before the hand? The commitment hash should be visible to players before any cards are dealt. If you can only see it afterward, the scheme is meaningless.
- Is there an independent audit trail? Bonus points if commitments are stored on a public blockchain rather than solely on the platform's own servers.
- Is the verification tool open source? You should not need to use the platform's own tool to verify. An open-source verifier means anyone can check the code and confirm it does what it claims.
If a platform cannot answer these questions clearly, that does not necessarily mean the game is rigged. But it does mean you have no way to prove it is not. In 2026, the technology to solve this problem exists and is production-ready. There is no good reason for a platform to not offer provable fairness.
The next time someone on Reddit asks "Is this game rigged?", the real answer is: on most platforms, there is literally no way to know. Not because the games are necessarily unfair, but because the architecture does not provide any mechanism for players to verify fairness independently.
Provably fair technology changes the question entirely. Instead of asking "do I trust this platform?", you ask "does the math check out?" And math does not have a profit motive.
The technology is here. The algorithms are proven. The only question is whether players will start demanding it.
Building a poker platform players can trust?
At Nine High Studios, we build poker platforms where every shuffle can be independently verified. If you are an operator looking to build trust with your players, we would love to chat.
Get in Touch