The lottery security chief who rigged five states, and the voice that gave him away

For six years, some lottery drawings in the United States were not random at all, and the person who made them predictable was the security director of the group that supplied the drawing computers.^[5][6] This long read follows the whole case: the hidden code, the $16.5 million ticket nobody would put a name to, the store video, two trials, the confession to five states, and the one control that would have ended it at the first change.

The insider who wrote the lottery's random number code

The structure matters more than the trick. The same person wrote the code, installed it, and was responsible for the security meant to detect tampering. Nobody else was in a position to ask why a random number generator needed to know the date.

The $16.5 million ticket nobody would claim

On December 23, 2010, a man in a hooded sweatshirt bought Hot Lotto tickets at a QuikTrip on East 13th Street in Des Moines.^[1][2] Six days later, on December 29, one of them matched the Hot Lotto drawing, which carried an advertised jackpot of $16.5 million.^[1][3] Then the ticket went quiet.

Almost 11 months passed with no winner. In November 2011, a man contacted the lottery claiming ownership, but the claim went nowhere.^[1] On December 29, 2011, hours before the 1-year deadline, representatives of a trust presented the ticket. The trustee, a New York lawyer, said the money would go to a corporation in Belize, and the trust's name was even misspelled on the ticket.^[1][4]

The lottery did not pay. Instead it asked the state Division of Criminal Investigation and the Attorney General to look into where the ticket came from. On January 26, 2012, the trustee faxed a withdrawal of the claim, saying he wanted to resolve the matter without further controversy.^[4] A ticket worth millions was simply abandoned. For investigators, that was the loudest clue in the case: people with a clean ticket do not walk away from the money to avoid giving a name.

The store video and the voice that gave him away

For almost 3 years, the investigation had one strong piece of evidence: the convenience store's surveillance recording of the purchase, with sound. On October 9, 2014, the state released the video and audio to the public.^[1]

The hood hid most of the buyer's face, but it did nothing for his voice. Within about a week, on October 15, 2014, people who knew Tipton had identified him, and at trial several witnesses pointed to the particular way he spoke.^[1] His phone records also undercut his story: they placed him in Iowa when he said he had been in Texas.^[2]

Charges were filed on January 15, 2015.^[1] The first case was narrow. It focused on buying and trying to redeem the ticket, which lottery employees are barred from doing, and on tampering with the lottery equipment.^[1]

The first trial and the jackpots in other states

At trial in Des Moines in the summer of 2015, prosecutors laid out the draw-room visit, the camera that captured about 1 frame per minute, and the thumb drive.^[2][3] The defense pointed out that his own photos from the period showed him clean-shaven, unlike the buyer on the tape, and relatives said the buyer looked smaller than him.^[1] The jury convicted him on both counts in July 2015, and he was sentenced that September to 10 years, as 2 consecutive 5-year terms.^[1][2]

The conviction opened the rest of the case. In 2015 Iowa officials contacted Colorado's lottery, and investigators there traced a Colorado Lotto drawing on November 23, 2005, a Wednesday, to tickets bought on November 21 and 22 in Commerce City and Lamar.^[7] That prize, $568,990, had been collected through a friend of Tipton's brother, Tommy Tipton, a former Texas judge.^[7][8] A Wisconsin Megabucks prize in 2007 paid about $783,000.^[5] In Kansas, 2 tickets for a smaller 2by2 game, each worth $22,000, were bought in December 2010 while Tipton traveled through the state on business, and prosecutors said the people who cashed them returned half in cash.^[9] An Oklahoma Hot Lotto prize in 2011 was added to the list.^[6]

In 2016, prosecutors also charged his brother and a Texas friend, Robert Rhodes, who surrendered in Iowa on fraud charges tied to the rigged drawings.^[8][13] Each new prize matched the same pattern of dates.^[6][13]

The confession to rigging five states

In June 2017 the Iowa Supreme Court ruled on his appeal. It upheld the tampering conviction but threw out part of the ticket-fraud count, finding that most of the passing and redeeming conduct happened too long before the charges were filed, and sent that part back.^[1] By then, the larger case had moved on.

On June 29, 2017, Eddie Tipton pleaded guilty in Iowa to ongoing criminal conduct, and his brother pleaded guilty to conspiracy to commit theft.^[5] In court, Eddie admitted that he wrote software containing code that let him predict winning numbers, gave those numbers to others, and shared in what they won.^[6] He had already pleaded guilty in Colorado that month.^[7] In total, 7 rigged tickets in 5 states were tied to the scheme: Iowa, Colorado, Wisconsin, Kansas and Oklahoma.^[10]

On August 22, 2017, he was sentenced to 25 years, the maximum, and ordered to pay about $2.2 million in restitution: about $1.1 million to Colorado, $644,000 to Oklahoma, $391,000 to Wisconsin and $30,000 to Kansas.^[10] His brother, whose share of the restitution was over $800,000, served a 75-day jail sentence.^[5][11] Rhodes pleaded guilty as well.^[6][10]

Hot Lotto did not outlast the case. Its operators cited years of falling sales, and the last drawing was held on October 28, 2017.^[12] Tipton was paroled on July 15, 2022, after a little more than 5 years in prison. He had told the parole board he personally received only about $351,000 from the scheme.^[11]

Why a rigged lottery ran for six years

Put the pieces back in order. The Iowa ticket failed because the lottery refused to pay a trust that would not name its owner. The video worked because coworkers knew his voice. Neither of those was a security control on the drawing system itself. The scheme ran from 2005 to 2011 because the person who wrote the generator's code was also the person trusted to keep it secure, and nobody independent ever read what he wrote.^[6][11]

Prizes that paid out were mostly modest, a few hundred thousand dollars at a time, claimed by different people in different states.^[10] Spread out like that, each win looked like luck. It took one greedy, oversized jackpot in the insider's home state to draw real scrutiny.

Timeline

The missing control

What it means now

The lesson of this case is not that insiders are dangerous. Most are not. It is that trust in one person had quietly replaced a process, and the process would have been cheap. A second reviewer, a sealed copy of approved code, or a camera that actually recorded would each have caught this years earlier than a store video did.

Every small business has its own version of the random number generator: the bookkeeper who both enters and approves bills, or the IT contractor who administers and audits the same systems. Separating those jobs is not an accusation. It protects the honest people in those roles as much as it protects the business.

Facts are drawn from court records, government reports, company statements and reputable reporting, listed below. People are named only where they were convicted, pleaded guilty or spoke publicly in an official role.