He's hiding the most obvious signs that it's a virtual machine to some degree. The scammers that in 99% of the cases fail to change a number with the browser developer tools because he added an invisible div on top of his fake bank page are just too incompetent to check for a VM, though some do or at least try to. Kitboga specifically also livestreams on Twitch: https://twitch.tv/kitboga for hours at a time, multiple days a week. I see don't really see a chance that's faked.