Are online slots rigged? How slot RNGs, labs and RTP versions work
Are slot machines rigged? A licensed online slot from a tested studio is not rigged in the sense most people mean: nobody watches your spins and switches off the wins. But the game is built to keep a share of every bet, the casino often chooses how big that share is, and some slots on unlicensed sites are not the real game at all. This guide covers how slot randomness works, what the testing labs check, how RTP versions work, the documented cases where things went wrong, and the checks you can make yourself before you spin.
How does a slot decide each spin?
Every online slot runs on a random number generator, usually on the game provider's server rather than in your browser. When you press spin, the game takes numbers from the RNG and maps them to reel positions through a set of virtual reel strips. The strips and the paytable together set the maths: how often each symbol lands, what each combination pays and how often features trigger.
Two things follow from that design:
- The result is fixed the moment you press spin. Animations, near misses and the order in which reels stop are presentation. They do not change the outcome.
- The edge is in the paytable, not in the RNG. A perfectly random RNG still produces a game that keeps a percentage over time, because the paytable pays less than the true odds. That kept percentage is the house edge, and its mirror image is the RTP.
GLI's standard for online gaming systems, GLI-19, sets out what the RNG part must do. Its section 3 requires the RNG to be "cryptographically strong", says it must be "computationally infeasible to predict or estimate future RNG values" from past ones, and requires every scaling and mapping step to be "unbiased, as verified by source code review". It also requires statistical tests evaluated at a 99% confidence level.
Who tests slots: eCOGRA, GLI, iTech Labs and BMM
Regulated markets do not take a studio's word for its maths. They require an approved test lab to certify the game first. The four names you see most often describe themselves like this on their own websites:
| Lab | What it says about itself | What its RNG work covers |
|---|---|---|
| eCOGRA | Founded "over 20 years ago", approved as a testing agency in 52 jurisdictions on four continents | Source code review, seed generation, "extensive statistical analysis on the output of the RNG over many iterations", periodic audits |
| GLI (Gaming Laboratories International) | "Since 1989, GLI has certified nearly two million items", for more than 475 jurisdictions, with labs on six continents | Publishes its own standards, including GLI-19 for interactive gaming |
| iTech Labs | An accredited test lab offering game, platform and RNG certification | RNG source code evaluation and testing of raw and scaled output; RTP audits based on server logs |
| BMM Testlabs | Serving the gaming industry since 1981, and calls itself "the longest established and most experienced private independent gaming test lab in the world" | Game and RNG evaluations across land-based and online markets |
A lab certificate means a specific version of a game was tested against a specific jurisdiction's rules. It does not mean the lab watches every casino that hosts the game, and it does not mean the RTP is high. Our comparison of provably fair and RNG certification explains the two trust models side by side; here we stay with slots.
RTP versions: the part casinos control
Most players assume a slot has one RTP. Many have several. A studio can ship the same game with more than one paytable, each with its own theoretical return, and the operator picks which one to run. GLI-19 reflects this: every game theme or paytable must carry its own ID and its own "theoretical return to player (RTP) percentage", and changes to "payout schedules" and "paytables" must be logged.
How low a version can go depends on the regulator. The Malta Gaming Authority lowered its minimum RTP for online games from 92% to 85% on 28 May 2021, bringing online games into line with the land-based threshold. So two Malta-licensed casinos can offer the same slot, with the same graphics, at returns several points apart, and both are within the rules.
What that gap means in money: on $1,000 of total spins, a 96% version keeps about $40 on average and an 88% version keeps about $120. Over a single session volatility swamps this, but over months of play it is the biggest number you control by choosing where to play.
This is not rigging. It is a disclosed setting. The problem is that many casinos do not make it easy to see which setting they chose.
Why slots are not provably fair
A provably fair game lets you recompute each result from seeds committed before the bet. Slots do not work that way. The RNG runs on the provider's server, its state is never shown to you, and the reel strips are proprietary. Even if a provider published a seed, you would also need the exact strip layout and feature logic to turn it into a spin result.
So a slot asks you to trust a chain: the studio built the maths it submitted, the lab tested it, the regulator checks that the certified version is what runs, and the casino offers the version it claims. Casino-built games such as dice, limbo and plinko are different, because the whole formula is short enough to publish. Our guide to which casino games are provably fair lists them, and Stake Originals explained works through one casino's set game by game. If a site sells a branded slot as provably fair, read our breakdown of Plinko slots versus provably fair Plinko first: the label is often wrong.
Have online slots ever been rigged? Documented cases
The cases below are well documented. None involved a tested game quietly lowering wins for one player; they show where the real risks sit.
A slot that could not pay for seven days
In August 2023 the online slot Deal or No Deal Banker's Bonanza, supplied by White Hat Gaming and offered by DraftKings in Connecticut, paid no wins at all from 15 to 21 August. According to Connecticut Department of Consumer Protection records reported by SBC Americas, 522 players wagered nearly $24,000 over more than 20,000 spins, and "it was impossible for any Connecticut patron to achieve a win on the game for a period of seven days". The cause was a game file that had not loaded properly. Players who complained were told the game was random. The regulator fined DraftKings $19,000 and White Hat Gaming $3,500, and players were refunded. It was an error rather than intent, but it shows a game can run outside its certified settings and that a regulator is what eventually catches it.
Counterfeit copies of real slots
Some unlicensed casinos run pirated copies of popular slots instead of connecting to the studio's servers. Endorphina published a warning naming sites that offered fake copies of its games without permission, and listed the risks: a lower RTP than the original, possible manipulation, paytables that do not match the real rules and no lab testing. A fake slot can look identical to the real one, which is why the checks below matter more than the game's artwork.
A predictable RNG in older machines
In February 2017 Wired reported on a group that exploited older Aristocrat Mark VI land-based machines. Operatives filmed spins on their phones so that a team abroad could model the machines' pseudorandom number generator and signal when to press spin. The machines were not rigged against players; their RNG was weak enough to predict. This is the kind of flaw that GLI-19's requirement for a cryptographically strong RNG is designed to rule out.
How to check a slot's RTP version and lab certificate
- Open the game's info or help screen before you play. The UK Gambling Commission's technical standard RTS 3 requires the RTP or equivalent odds information to be "easily available before the customer commits to gamble", and many studios show it in the rules panel in other markets too. Note the exact figure, not the "up to" figure on a review site.
- Compare it with the studio's own page for the game. If the studio lists a higher RTP than the casino's copy shows, you are playing a lower version.
- Check the casino's licence. Find the licence number in the footer and look it up on the regulator's own register. An unlicensed site is where counterfeit games turn up.
- Open the certificate, not the logo. A lab badge in a footer proves nothing. A real certificate names the lab, the game or platform, the version and the date. iTech Labs says it issues a hot-linked original certificate, so a certificate link should open on the lab's own website rather than as an image on the casino's server.
- Check the game loads from the studio. Real studio games show the provider's loading screen and branding consistently. If a slot shows a different studio name, odd fonts or rules that do not match the studio's page, stop playing it.
- Prefer games you can verify for small edges. If your goal is a low, checkable edge, a casino's own dice or limbo game with a 1% edge, checked in our verifier, beats most slot versions on cost.
The honest answer
Licensed slots from tested studios are random, and the evidence for that is the lab and regulator chain, not your own maths. What hurts players is the lower RTP version they never noticed, unlicensed sites running fakes, and the long-run edge that every slot carries. Check the RTP screen, check the licence, and set a budget in your casino's responsible gambling tools before you start.
Sources
- GLI-19 Standards for Interactive Gaming Systems v3.0 and GLI press release on GLI-19 v3.0
- eCOGRA: RNG certification and eCOGRA: jurisdictional approvals
- iTech Labs
- BMM Testlabs
- Malta Gaming Authority: RTP percentage streamlined, 28 May 2021
- UK Gambling Commission: RTS 3, rules, game descriptions and the likelihood of winning
- Connecticut Department of Consumer Protection records on Deal or No Deal Banker's Bonanza, as reported by SBC Americas, 4 September 2024
- Endorphina press release on counterfeit copies of its games, published by Focus Gaming News
- Wired, "Russians Engineer a Brilliant Slot Machine Cheat", February 2017
Key terms
- Random number generator (RNG)
- The software behind third-party slot and table results, trusted through lab certification instead of player-checkable seeds.
- Return to player (RTP)
- The share of all money staked that a game is designed to return to players across a very large number of rounds.
- House edge
- The average percentage of every wager that a game is built to keep for the casino.
- Volatility
- How sharply a game's results swing: high volatility brings rare big wins, low volatility brings frequent small ones.
- Provably fair
- A cryptographic method that lets you confirm a game result was set before your bet and left untouched afterwards.
- Live dealer games
- Table games broadcast from a studio with a real dealer, where physical cards, wheels or dice decide the outcome.