Winning Poker Network switched on ScreenShield for flagged ACR Poker accounts on 29 September, and any WPN player can now request it through Support. The feature keeps your tables visible on your own monitor while hiding protected table content, hole cards included, from the screen-capture and screen-sharing methods it covers.

ACR set out the details in releases on 6 and 7 October, a week after the Mesh Agent remote-access malware we reported was found inside two compromised poker tools. The release is the operator’s answer to that story, and it is careful about what it claims.

It’s another layer of protection, not a magic button.
Phil Nagy, WPN CEO

WPN says its review found no compromise of its own systems, poker software or official downloads. Its Game Integrity team is investigating relevant player and account activity separately, and ScreenShield does not replace that work.

What ACR Poker ScreenShield Blocks and What It Leaves Alone

The release describes the feature by its effect on external capture technology, and that distinction decides whether it is worth requesting. Nothing about it reaches into your machine.

The practical reading is that ScreenShield lowers the value of a compromised machine rather than curing it. A remote-access agent on your PC still needs removing, and the checks in our malware report still apply.

Why WPN Contacted Some Players on 29 September

WPN contacted players whose machines met its detection criteria for software with remote-access or screen-control capabilities, and switched ScreenShield on for them before the issue was demonstrated in public. That contact was a precaution, not a finding.

Having that software installed doesn’t, by itself, mean somebody is cheating or that their computer has been hacked.
Phil Nagy, WPN CEO

Remote-access tools have ordinary uses: work presentations, collaboration, reaching another computer, IT support. The accounts discussed in the Paul Gregg case across three rooms fall under the Game Integrity investigation, and WPN says compensation will be determined from its findings if wrongdoing and harm to its players are established.

By WPN’s account, contact and activation came before the issue was demonstrated in public. That is the sequence a room would want on record.

Why ScreenShield Is Not On for Every Account

The capture functions ScreenShield blocks are the ones a large group of legitimate players rely on every day.

Switching the protection on for every account would break all four, so WPN has not done that. It plans regular scans and more proactive activation where its detection criteria are met, and leaves the rest to the player.

That puts the decision on you, and it splits cleanly by how you use the client.

Support can review account settings for players with a real streaming, recording or sharing need, so the choice is not binary. A streamer who plays unstreamed sessions in the week is exactly the case that review exists for.

How to Request ScreenShield

Any WPN player can request ScreenShield by emailing support@winningpokernetwork.com. WPN asks for up to 48 hours for activation, so the protection is not instant and a request sent on a Sunday morning will not cover that afternoon’s session.

An on/off control inside the poker client is in development. It is a planned update, not something you will find in the lobby today.

If you are not yet on the network, our ACR Poker review and rakeback deal covers the cashier, the 27% fixed deal and the Elite Benefits ladder, with the measured rakeback from our funded test.

GTO Wizard Cross-Checks and the Final-Table Target

ScreenShield sits alongside the solver checks ACR already runs. ACR and GTO Wizard cross-check whether situations played on ACR were solved in GTO Wizard during play, the mechanism behind the Fair Play Check we tested in our full GTO Wizard review and test.

GTO Wizard’s new preflop ICM solver handles tournament spots with customised payout structures, and the public Fair Play Check now includes those solutions with the time they were generated. A timestamped solve gives an investigation something firmer than a pattern.

The two companies are working towards broader final-table analysis, with every ACR final table as the stated goal. That is a target, not current coverage, and ACR’s release does not say every final table is being checked today.

The Final Table Replayer archive publishes hole cards after the event, solver cross-checks examine decisions during play, and ScreenShield protects the table itself while the hand is live. The reshuffle and withdrawal 2FA measures in ACR’s existing security stack and partnerships run underneath all three.

WPN Is Sending the Method to Other Operators

WPN has sent other online poker operators information on how this type of table protection can be implemented. Sharing the guidance does not mean another operator has adopted it, and none has said so publicly.

Because player security is bigger than competition.
Phil Nagy, WPN CEO

Nagy also asked for the investigation to follow evidence rather than speculation about individuals or about how software reached a particular computer. Most of what has circulated on this story so far has come from forum posts and X threads rather than any operator’s findings.

Three things change the picture from here: the in-client toggle shipping, the next round of scans, and the Game Integrity findings, which decide whether compensation follows. Until then, the request route is the only lever a player controls, and it costs an email.

For the investigation’s findings and any operator that follows WPN, keep an eye on our daily poker news and industry coverage.