Illustration by Francesco Francavilla

The file landed on Rob Sand’s desk with something less than a thud. Despite holding the contents of an investigation still open after more than two years, the file was barely half an inch thick. “Happy birthday,” his boss said.

It was not Sand’s birthday. His boss, an Iowa deputy attorney general named Thomas Miller, was retiring in July 2014 after nearly three decades of prosecuting everything from murder to fraud. He had hired Sand four years earlier and made him the youngest prosecutor in a nine-attorney team that handled challenging cases all over the state. Now, Miller was offloading cases to colleagues. This one, having to do with a suspicious lottery ticket worth $16.5 million, was full of dead ends. Investigators didn’t even know if a crime had been committed. The most tantalizing pieces of evidence were on a DVD: two grainy surveillance clips from a gas station. Sand slid the disc into his laptop and pressed play.

A man walked into a QuikTrip just off I-80 in Des Moines. It was a weekday afternoon two days before Christmas. The hood of the man’s black sweatshirt was pulled over his head, obscuring his face from two surveillance cameras overhead. Under the hoodie, he appeared to be wearing a ball cap; over the hoodie, he wore a black jacket. He grabbed a fountain drink and two hot dogs.

“Hello!” the cashier said brightly.

The man replied in a low-pitched drawl that struck Sand as distinct: “Hell-ooooh.”

“Couple hot dogs?” the cashier asked.

“Yes, sir,” the man replied quietly, his head down.

The man pulled two pieces of paper from his pocket: play slips for Hot Lotto, a Powerball-like lottery game available in 14 states and Washington, D.C. A player — or the game’s computer — picked five numbers between one and 39 plus a sixth number, known as the Hot Ball, between one and 19. The prize for getting the first five numbers right was $10,000. But a much larger prize that varied based on the number of players went to anyone who got all six numbers right. The record Hot Lotto jackpot of nearly $20 million had been claimed in 2007. The jackpot at the time of this video was approaching that record, and the stated odds of winning were one in 10,939,383.

The cashier took the man’s play slips, which had already been filled out with multiple sets of numbers. At 3:24 p.m., the cashier ran the slips through the lottery terminal. An older man with a cane limped by the refrigerated section. A bus drove by. The cashier handed over his change. Once outside, the man pulled down his hood, removed his cap, got into his SUV and drove away.

Two years into the case, that was virtually all the investigators had. Sand watched the video again and again, trying to pick up every little detail: the SUV’s make; the tenor of the man’s voice; his indistinct appearance: most likely in his forties and 100 pounds overweight, maybe more.

Sand, a baby-faced Iowan who turned down Harvard Law School for the University of Iowa College of Law, had a background that seemed perfect for the case: a high-school job writing computer code and doing tech support, a specialty in white-collar crime. His recent cases included securities fraud and theft by public officials.

The ticket in the video was purchased on December 23, 2010. Six days later, the winning Hot Lotto numbers were selected: 3, 12, 16, 26, 33, 11. The next day, the Iowa Lottery announced that a QuikTrip in Des Moines had sold the winning ticket. But a month after the numbers were drawn, no one had presented the ticket.

The Iowa Lottery held a news conference. Phone calls poured in, and dozens of people claimed to be the winner. Some said they had lost the ticket. Others said it was stolen from them. But lottery officials had crucial evidence that wasn’t publicly available: the serial number on the winning ticket and the video of the man buying it. One by one, they crossed off prospective claimants. One caller said his friend was a regular Hot Lotto player who had just died in a car wreck — should he go to the junkyard to search through his deceased friend’s car?

Three months after the winning ticket was announced, the lottery issued another public reminder. Another followed at six months and again at nine months, each time warning that winners had one year to claim their money. “I was convinced it would never be claimed,” says Mary Neubauer, the Iowa Lottery’s vice president of external relations. Since 1999, she had dealt with some 200 people who had won more than $1 million; she’d never seen a winning million-dollar ticket go unclaimed. “And then comes November 9, 2011.”

A man named Philip Johnston, a lawyer from Quebec, called the Iowa Lottery and gave Neubauer the correct 15-digit serial number on the winning ticket. She asked his age (in his sixties, he said) and what he was wearing when he purchased the ticket. His description (a sports coat and gray flannel dress pants) didn’t match the QuikTrip video. Then, in a subsequent call, the man admitted he had “fibbed”; he said he was helping a client claim the ticket so the client wouldn’t be identified.

This was against Iowa Lottery rules, which require that the identities of winners be public. Johnston floated the possibility of withdrawing his claim. Neubauer was suspicious: The winner’s anonymity was worth $16.5 million?

One year to the day after the winning numbers were randomly generated — and less than two hours before the 4 p.m. deadline — representatives from a prominent Des Moines law firm showed up at the Iowa Lottery’s headquarters with the winning ticket. The firm was claiming the ticket on behalf of a trust. Later, the Iowa Lottery learned that the trust’s beneficiary was a Belize corporation whose president was Philip Johnston, the Canadian attorney. “It just absolutely stunk all over the place,” says Terry Rich, chief executive of the Iowa Lottery. The Iowa attorney general’s office and the Iowa Division of Criminal Investigation opened a case.

In an interview in Quebec City, Johnston told investigators he had been contacted about the ticket by a Houston attorney named Robert Sonfield. Johnston also pointed investigators toward a Sugar Land, Texas, businessman named Robert Rhodes. A trip to Texas by Iowa investigators proved fruitless; during their several days there, both Sonfield and Rhodes evaded them.

By the time the file ended up on Rob Sand’s desk in 2014, the case had acquired cult-like status in his office. It was spoken about with gallows humor: “We’ll find the guy who bought the ticket ended up getting offed,” says Sand. “That’s what this is going to turn out to be: a murder case.”

Miller had mentored Sand and saw in him a kindred spirit, someone for whom practicing law was a calling. Sometimes Sand’s moral compass was so steady that he came off as a square; his brothers-in-law nicknamed him Baby Jesus. Sand grew up in Decorah, the son of a small-town doctor who still made house calls. He wanted to get into white-collar criminal prosecution because it focuses not on crimes of desperation but on crimes of greed. “Crimes against gratitude,” Sand calls them. But all he had was grainy video of a man buying a lottery ticket worth $16.5 million. “We only had one bullet left in our revolver,” Sand says, “and that was releasing the video.”

On October 9, 2014, nearly 46 months after the man in the hoodie left QuikTrip, the Iowa Division of Criminal Investigation put out a news release with a link to a 74-second clip of the surveillance footage. A few days later, in Maine, an employee of the Maine Lottery opened an email forwarded from his boss. The employee recognized the distinct voice in the video: It belonged to a man who had spent a week in the Maine Lottery offices a few years earlier conducting a security audit.

In Des Moines, a web developer at the Iowa Lottery also recognized that voice: It belonged to a man she had worked alongside for years. A receptionist in another lottery office handed her earbuds to Noelle Krueger, a draw manager, and told her to listen. “Why am I listening to a video of Eddie?” she replied.

By Eddie, she meant Eddie Tipton, the information security director for the Multi-State Lottery Association. The organization runs lotteries for 33 different states plus Washington D.C., Puerto Rico and the U.S. Virgin Islands. It was based in the Des Moines suburbs. Among the games it ran was the Hot Lotto.

Eddie Tipton cut a big, friendly figure around the Multi-State Lottery Association office. He grew up in rural Texas, but while his siblings were outside, he was always in his room, fiddling with his computer. He was a paranoid sort who rarely paid with credit cards, who worried about people tracing his identity. But he always wanted people to like him. When a coworker was in a bad mood, says one colleague, Tipton would pat him on the shoulder and say, “I just want you to know I’m your friend.”

Tipton built a 4,800-square-foot, $540,000 house in the cornfields south of Des Moines. It had five bedrooms and a huge basement, including a pool table, a shuffleboard table, a stadium-style home theater and a space he considered turning into a basketball court. Friends wondered why a single man needed such a big house and how he could afford it on a salary just shy of $100,000 a year. In private moments, Tipton told them he was lonely and wanted a family more than anything, so he poured his savings into the house he hoped to fill with a wife and children. But the right partner never came along. Instead, he hosted office Christmas parties and asked friends to visit. His family, still in Texas, checked on him frequently.

His life revolved around his job. The Multi-State Lottery Association was a small organization, and Tipton was overextended. He wrote software and worked on webpages. He handled network security and firewalls. And he reviewed security for lottery games in nearly three dozen states. He was putting in 60-hour weeks and staying at the office until 11 p.m.

When Ed Stefan, the Multi-State Lottery Association’s chief information officer and chief security officer, saw the surveillance video, he didn’t want to believe it. This wasn’t just some coworker. This was Eddie Tipton, a man he had known for more than two decades, since they were in calculus class at the University of Houston. Stefan met his future wife while he and Tipton were on a charity bike ride in Texas; Tipton would later be in their wedding. Stefan helped Tipton get his job at the association. They bought some 50 acres of land together and built adjacent houses. They even applied for a joint patent for computer-based lottery security.

Stefan watched the video for the first time after a former coworker sent him the link. “That just can’t be Eddie,” he thought. Then: “That’s Eddie. Why is he wearing a hoodie? I’ve never seen Eddie in a hoodie.” Stefan became sick to his stomach: His friend, a man with deep knowledge of the computers that ran the lottery, was there onscreen buying a ticket that would be worth $16.5 million. Later, Stefan would tell investigators it was like finding out your mother was an axe murderer. He felt betrayed.

Jason Maher was another friend and colleague who didn’t want to believe what he was seeing on the video. He and Tipton had met at Taki, a Japanese restaurant outside Des Moines that they both frequented. The lifelong computer aficionados and gamers hit it off; Tipton joined Maher’s gaming clan, and they spent hours playing the multiplayer online game World of Tanks. Tipton suggested Maher apply for a job at the lottery association as a network engineer. Tipton, Maher says, “had a heart of gold.”

So when Maher saw the video and heard that familiar low-pitched voice, he did what a computer whiz does. “That night I sat down — there’s no way Eddie did this,” he says. “There’s got to be something wrong.” He put the surveillance file into audio software, removed white noise and isolated the voice. Then he took footage from security cameras in his house — Tipton had just visited the night before — and compared Tipton’s voice in the video. “It was a complete and utter match, sound wave and everything,” says Maher. 

The next day, he went to the QuikTrip where the ticket was purchased and measured the dimensions of the tiles on the floor, the height of the shelving units, the distance between the door and the cash register. He used the results to compare the hand size, foot size and height of the man in the video with the man who had become his friend. “When the FBI guys came in, I wanted to be able to tell them it wasn’t Eddie,” says Maher. “Once I did this, it was like, ‘Well, [expletive] — it’s Eddie.’”

In November 2014, state investigators showed up at Tipton’s office. They asked him who he knew in Houston. He told them about his family — mother, sister and brothers, including Tommy, a former sheriff’s deputy turned justice of the peace near the Texas Hill Country. He didn’t mention Robert Rhodes, the man who initially passed the $16.5-million ticket to an attorney. By searching Tipton’s LinkedIn profile, investigators found that he had been employed at Rhodes’s Texas-based software company, Systems Evolution, for six years as its chief operations officer. In fact, the two were best friends and vacationed together.

Tipton was arrested in January 2015 and charged with two felony counts of fraud. Half a year later, on a hot, sticky July morning, Rob Sand stood before a jury at the Polk County Courthouse. “This is a classic story about an inside job,” he began. “A man who, by virtue of his employment, is not allowed to play the lottery nor allowed to win, buys a lottery ticket, wins and passes the ticket along to friends to be claimed by someone unconnected to him. This story, though, has a 21st century twist.”

The prosecution knew Tipton had bought the winning ticket. The video, specifically the distinct voice that colleagues had recognized, made that pretty clear. So did cellphone records, which showed Tipton was in town that day, not out of town for the holidays as he claimed, and that he had been on the phone for 71 minutes with Robert Rhodes, the man who briefly had possession of the ticket. Investigators believed he’d fixed the lottery. But how?

Maher, Tipton’s gaming buddy, told them about Tipton’s interest in rootkits, malicious software that can be installed via flash drive to take control of a computer while masking its existence until it later deletes itself. Sand theorized that Tipton went into the draw room six weeks before the big jackpot and, despite the presence of two colleagues, managed to insert a thumb drive into one of the two computers that select the winning numbers. That thumb drive contained the rootkit that allowed Tipton to direct which numbers would win the Hot Lotto on December 29, 2010.

Tipton’s defense attorney, Dean Stowers, called this the Mission: Impossible theory. He characterized the story of a malicious, self-destructing rootkit (“magic software”) installed while two colleagues looked on as preposterous. His closing arguments referenced a quote attributed to Albert Einstein: “Logic will get you from A to B. Imagination will take you anywhere.”

But Sand called Stowers’s focus on this complicated rootkit theory a red herring. He told the jury to focus on the many ways Tipton could have fixed the lottery: He wrote the code. He had access to the random number generator machines before they were shipped to other states. You don’t have to understand the exact technology to convict Tipton, Sand argued; you just have to realize the near-impossible coincidence of the lottery security chief buying a winning ticket and that ticket being passed to his best friend. The prosecution had to prove only that Tipton tried to illegally buy lottery tickets as a Multi-State Lottery Association employee and tried to claim the prize through fraudulent means.

The jury found Tipton guilty on July 20, 2015. He would be sentenced to 10 years in prison, and he would appeal. The Iowa Supreme Court later dismissed his conviction on one charge, tampering with lottery equipment, and the case was sent back to District Court.

Six weeks after the trial concluded, Sand had returned to his desk. It had been a busy summer. But in the back of his mind, he was still thinking about Eddie Tipton. He knew white-collar criminals aren’t usually caught on their first attempt. The fact that Tipton’s attorney had demanded a speedy 90-day trial, an unusual maneuver that cut short the prosecution’s time to investigate, made Sand suspicious. His gut said other fraudulent lottery tickets were out there.

One morning Sand’s office phone rang, and an area code he recognized popped up: 281, from Texas, where Tipton used to live. The caller had a drawl and told Sand he’d seen an article in the La Grange, Texas, newspaper about Tipton’s conviction. “Did y’all know,” the tipster asked, “that Eddie’s brother Tommy Tipton won the lottery, maybe about 10 years back?”

Special agent Richard Rennison’s phone rang at the FBI office in Texas City, a port town on the shore of Galveston Bay. Sand was on the line, inquiring about a case Rennison had investigated a decade before. At the time, it turned out to be nothing. But the case still stuck in his mind: “That’s my Bigfoot case.”

A man named Tom Bargas had contacted local law-enforcement authorities in early 2006 with a suspicious story. He owned 44 fireworks stands in Texas. Twice a year — after New Year’s and after the Fourth of July — he had to handle enormous amounts of cash, more than half a million dollars at once. A local justice of the peace who shod Bargas’s horses called him around New Year’s and caught him off-guard: “I got half a million in cash that I want to swap with your money.” “What’s wrong with your money?” Bargas replied.

“What’s a justice of the peace who makes $35,000 a year doing with that much cash?” Bargas thought. He called the sheriff and the police, who called the FBI. Soon, the bureau contacted Bargas and outfitted him with a wire. Bargas met with the man, who pulled out a briefcase filled with $450,000 in cash, still in its Federal Reserve wrappers. As the FBI listened, Bargas swapped $100,000 of worn, circulated bills for $100,000 of the man’s crisp, unused bills. To the bureau, this smelled like public corruption, and they went to work investigating the serial numbers on the bills.

A couple months later, Rennison got a call from the Fayette County sheriff in La Grange, a place best known for the Chicken Ranch, the brothel that inspired The Best Little Whorehouse in Texas. The sheriff was laughing so hard he could hardly speak. He told Rennison the justice of the peace was holed up in a Houston hospital with two shattered legs. He had fallen 31 feet out of a tree. He had been hunting Bigfoot.

“My grandmother was raised on a farm in Arkansas where this creature would come in and harass all the farm animals,” this man later told investigators. “My grandmother would tell me all these stories of this animal that harassed my family.” He went on: “I started hitting the woods. It was always that doubt in your mind. And then something happened to me in Louisiana where I actually watched these animals for a couple of hours, and I’ve been hooked ever since.”

Rennison visited the man in the hospital then set up an interview once he was discharged. The man was a member of the Bigfoot Field Researchers Organization. He told Rennison he’d won the lottery in Colorado while on a Bigfoot hunt. He was on the outs with his wife and was trying to keep the lottery winnings from her. A Bigfoot-hunting friend claimed the prize in exchange for 10 percent of the money. It all checked out. Case closed.

“Right before I leave, we’re still sitting down at this nice conference table and he looks over at his attorneys and says, ‘Can I show him?’” Rennison recalls. “Hanging off the back of his chair is a plastic grocery bag. He pulls out a plaster cast of a footprint.”

Rennison put the footprint next to his own foot. They were roughly the same size. “That doesn’t look like Bigfoot,” the FBI agent said. “It was a juvenile,” the man snapped. The man’s name was Tommy Tipton.

Now the hunt was on for more illicitly claimed tickets. Iowa investigators noticed that the friend who claimed the $568,990 Colorado Lottery prize for Tommy Tipton, a man named Alexander Hicks, was dead. “We first thought, Whoa — this is our first body related to this case,” Sand says. It wasn’t. He had died of cancer.

The investigators collected a decade’s worth of winners from lotteries across the country. They loaded data from approximately 45,000 winning tickets into Excel spreadsheets and searched for any connections to Eddie Tipton. They reviewed his Facebook friends, pulled phone records and looked for matches with the spreadsheet.

In September 2015, they learned that a $783,257.72 payout for Wisconsin’s Very Own Megabucks had been claimed in early 2008 by a Texas man named Robert Rhodes, who wanted to deposit it into the account of a limited-liability corporation. That drawing took place December 29, 2007 — the same day the winning numbers on Tipton’s $16.5-million Iowa ticket were selected three years later. Rhodes was Eddie Tipton’s best friend. Another hit.

One evening over the holidays, Sand was at his parents’ house working on his laptop, sifting through records. He noticed that a Kyle Conn from Hemphill, Texas, had won a $644,478 jackpot in the Oklahoma Lottery some years back. Tommy Tipton had three Facebook friends named Conn. Sand got a list of possible phone numbers for a Kyle Conn and cross-referenced them with Tommy Tipton’s cellphone records. Another hit.

Investigators noticed two winning Kansas Lottery tickets for $15,402 apiece were purchased December 23, 2010 — the same day Tipton had purchased the Iowa ticket, and the same day that cellphone records indicated he was driving through Kansas on the way to Texas for the holidays. One of the winning tickets was claimed by a Texan named Christopher McCoulskey, the other by an Iowa woman named Amy Warrick. Each was a friend of Eddie Tipton’s.

Early one morning, Sand and an investigator knocked on the woman’s door. She told them she’d gone on one date with Tipton, but their relationship became platonic. Tipton told her he wasn’t able to claim a winning lottery ticket because of his job. If she could claim it, he said, she could keep a significant portion as a gift for her recent engagement.

“You have these honest dupes,” Sand says. “All these people are being offered thousands of dollars for doing something that’s a little bit sneaky but not illegal.” Investigators in Iowa now had six tickets they figured were part of a bigger scam. But the question remained: How did it work?

Investigators in Wisconsin discovered they still had the random number generator computers used for the 2007 jackpot sitting in storage. Unlike Iowa’s computers, the hard drives had not been wiped clean; their software was the same as the day Robert Rhodes won $783,257.72. Wisconsin enlisted a computer expert named Sean McLinden to conduct an investigation that included forensic analysis and reverse engineering.

On January 7, 2016, Sand’s phone rang. It was David Maas, an assistant attorney general in Wisconsin. He told Sand to check his email. Maas had sent him an attachment with 21 lines of “pseudocode,” a common-language translation of McLinden’s forensic analysis that showed part of Tipton’s malicious code. It was small enough that it would not radically change the file size, which might create suspicion. Plus the code hadn’t been hidden; you just needed to know what to look for. “This,” Maas says, “was finding the smoking gun.”

The smoking gun would help lead to a guilty plea from Tipton. In the plea deal, Sand insisted he come clean about how he fixed the lottery. This could help the lottery industry improve its security. If Tipton lied — or if another fraudulent ticket were found later — the deal would be voided and Tipton would be subject to further charges.

Tipton had named his program QVRNG.dll: Quantum Vision Random Number Generator. In Tipton’s telling, his wasn’t an evil plan to get rich. This was just a computer nerd’s attempt to crack the system. “It was never my intent to start a full-out ticket scam,” Tipton told investigators. “It occurred to me, like, Wow, I could do this. I could be making a living doing this.” He went on: “If this was, like, some mob-related thing, I’d just give this information to the mob, and they would go out and win lotteries left and right. Nobody would know. But I don’t have any mob ties. I don’t know anybody. I gave tickets to friends or family.”

More than a decade ago, Tipton continued, he walked past one of the Multi-State Lottery Association’s accountants. Tipton was conservative, the accountant liberal, and they often ribbed each other.

“Hey, did you put your secret numbers in there?” the accountant said, teasing Tipton.

“What do you mean?”

“Well, you know, you can set numbers on any given day since you wrote the software.”

And that’s when the idea first came. “Just like a little seed that was planted,” Tipton said in his proffer. “And then, during a slow period, I just had a thought that it’s possible, and I tried it and I put it in.” The code wasn’t a brazen Mission: Impossible stunt of sneaking into the draw room with a malicious thumb drive. It was a simple piece of code, partly copied from an internet source, inserted by the one man responsible for information security at the organization that runs three dozen U.S. lotteries.

Here’s how the association’s random number generators were supposed to work: The computer takes a reading from a Geiger counter that measures radiation in the surrounding air, specifically the radioactive isotope Americium-241. The reading is expressed as a long number of code; that number gives the generator its true randomness. The random number is called the seed, and the seed is plugged into the algorithm, a pseudorandom number generator called the Mersenne Twister. At the end, the computer spits out the winning lottery numbers.

Tipton’s extra lines of code first checked to see if the coming lottery drawing fulfilled his narrow circumstances. It had to be on a Wednesday or Saturday, and one of three dates in a non-leap year: the 147th day of the year (May 27), the 327th day (November 23) or the 363rd day (December 29). Investigators noticed that those dates generally fell around holidays — Memorial Day, Thanksgiving and Christmas — when Tipton was often on vacation. If those criteria were satisfied, the random number generator was diverted to a different track. Instead, the algorithm would use a predetermined seed number that restricted the pool of potential winning numbers to a much smaller, predictable set of numbers.

So Tipton knew what no one else knew: For the Iowa Hot Lotto drawing on December 29, 2010, there weren’t really 10,939,383 sets of possible winning numbers. There were only a few hundred. Late at night before a draw that fulfilled his criteria, Tipton stayed in his messy, computer-filled office. He set a test computer to the date and time of the coming draw and ran the program over and over again. For the first lottery he rigged, the November 23, 2005, drawing in Colorado, Tipton wrote down each potential set of winning numbers on a yellow legal pad. He handed the pad — each sheet with 35 or so sets of six numbers — to his brother.

It was a cheat sheet; instead of playing every possible number combination to ensure one combination won, he had to play only a few hundred. “If you want a chance to win, you need to play all of these,” Tipton told his brother. “I don’t know if any of them will win, but you’re going anyway” — his brother was about to go on a Bigfoot-hunting trip to Colorado — and “these have a good chance of winning based on my analysis. Play them all.”

On a clear, blue summer day in Des Moines last year, Eddie Tipton, a square-shaped, balding man who was then 54, trudged up the stairs of the Polk County Courthouse. He wore blue jeans and a salmonshort-sleeved button-up shirt, untucked and unbuttoned, with a blue T-shirt underneath. His hands were shoved in his pockets, and his head was down. He had accepted a plea agreement for masterminding the largest lottery scam in American history: one count of ongoing criminal conduct, part of a package deal that allowed his brother to be sentenced to only 75 days. Tipton was here for his sentencing.

In statements to prosecutors, he painted himself in the most generous way possible, a kind of coding Robin Hood, stealing from the lottery and helping people in need: his brother who had five daughters, his friend who’d just gotten engaged. “I didn’t really need the money,” he said. The judge noted that Tipton seemed to rationalize his actions — that he didn’t think it was necessarily illegal, just taking advantage of a hole in the lottery’s system. It wasn’t all that different, Tipton believed, from insider trading, except that laws didn’t specifically prohibit him from fiddling with the random number generator code. His attorney equated what he did with counting cards at a casino. Tipton wasn’t robbing the casino at gunpoint; he was cheating the house.

The other side disagreed. Tipton was “nothing but a common thief who happened to be handed the keys to the candy store,” says Sand’s former boss, Thomas Miller. “It’s not a case of Sherlock Holmes’s arch nemesis, Moriarty, being a criminal genius. This is just a regular schlub, a thief who happens to have knowledge of computer security.”

From Tipton’s point of view, it was complicated. He had done something to see if he could do it. To his surprise, it worked. He said he inserted that code only once; after the code was approved by Gaming Laboratories International, machines containing it were shipped all over the country. He had created a beast and sent it into the world. “You plant that money tree in your backyard,” as Maas, the Wisconsin prosecutor, puts it, “and it’s hard not to keep picking at it.”

In interviews, investigators had asked Tipton if he was proud of the success of his code. “It was more like I’m ready for it to be gone,” Tipton said. “It was never my intent to go out there and start winning all these lotteries. It was just, like I said, step by step it happened.”

At sentencing, the judge asked if Tipton had anything to say. After a long pause, he cleared his throat. Family members and former coworkers were in the courtroom. 

“Well,” he said matter-of-factly, “I certainly regret my actions. It’s difficult to say that with all the people behind me that I hurt. And I regret it. I’m sorry.” As the case was being litigated, Tipton had confessed to friends that he was racked with guilt. At another point during the proceedings, he leaned across a divide and extended his hand to Sand. Sand took the handshake as a sign of respect, as if Tipton had thought he outsmarted the system but the system figured him out. On the day of his sentencing, Tipton told the judge he’d been taking classes to go into ministry. A deputy placed him in handcuffs and led him away.

Earlier in the summer, Tipton sat in a conference room with Sand and law-enforcement and lottery officials to give his full confession, as promised in his plea agreement. Eventually, he would head to Clarinda Correctional Facility in southern Iowa, where he remains today, Offender No. 6832975.

During a lunch break in Tipton’s hours-long confession, Sand and others involved in the prosecution walked over to the High Life Lounge. They ordered bacon-wrapped tater tots to celebrate. “Eddie sees himself as much brighter than the rest of the world, the sharpest tool in the toolbox,” Sand says. “It’s the kind of thing I see in white-collar case after white-collar case, people who think they’re better than everybody else, that people trust them and love them, and that no one will be able to figure this out.”

The judge sentenced Tipton to a maximum of 25 years in prison. His restitution payments to various state lotteries came to $2.2 million even though, according to his attorney, Tipton pocketed only about $350,000 from the scam, the rest going to those who claimed the tickets. (Prosecutors didn’t believe that, pointing to Tipton’s massive house as well as the fact that he and his brother owned 11 pieces of property either jointly or individually in Fayette County, Texas.) In Iowa, which has indeterminate sentencing, a 25-year sentence could mean Tipton is released much sooner; Sand expects he will be released within seven years.

Sand says he feels a deep intellectual satisfaction in solving the puzzle: “The justice system at its best is really about a search for truth.” But it couldn’t go back in time and correct wrongs. At the end of this years-long case, he came to a realization: He had grown weary of dealing with criminals. “In so much darkness,” Sand says, “I started to lose my light.”

A few months after the highest profile case of his career, Sand quit. He had decided to run for state auditor in the coming November election so that he could make positive changes. If he wins, he will be investigating government waste, abuse and fraud. “There’s no way I would make a move to get away from the darkness of prosecution without finishing this case first,” Sand says. “So finishing it, to me, was not merely satisfying. It was liberating.” 

This article is published in collaboration with The New York Times, where it first appeared.

Read this article as it appears in the magazine.