Nearly 300,000 League of Legends and VALORANT accounts locked for ranked cheating: Riot's crackdown and the story behind the numbers

On November 18, 2026, Riot Games disclosed that nearly 300,000 League of Legends and VALORANT accounts had been locked for ranked cheating, weeks after Vanguard's September 2026 integration into League of Legends. The announcement frames Vanguard as a cross-title governance layer, not just an anti-cheat tool. The 2026 World Cup taught me that numbers don't play football: set against an estimated 140 million monthly players, 300,000 accounts is roughly 0.2 percent, and the more significant story lies in Riot's planned identity infrastructure. Riot's enforcement targets three groups: boosted accounts, 'hitchhikers' who queue with boosted accounts while using their own accounts, and accounts disrupting ranked games. LP-loss protection is introduced when a cheater or leaver is detected. The 'hitchhiker' doctrine expands liability by association: Riot may revoke ranked points even from players who violated no software rule. No false-positive rate, evidentiary threshold, or appeal process has been published. In contrast, smurfing is not automatically cheating; Riot lists eight legitimate cases, including practice and protecting a main account's achievement. The boundary is intent-based and difficult to enforce consistently. The longer-term plan matters most: MFA, TPM 2.0 hardware attestation, and device-based authentication, potentially varying by rank, aim to make one-time accounts costlier. This shifts enforcement from banning accounts to banning users, raising the account-creation cost curve sharply and structurally disadvantaging players on shared or internet-café machines. The 300,000 figure is weaker than it appears: all data originates from Riot as the enforcing party, without independent audit, and the 140 million denominator is unsourced. A large share of League of Legends' monthly active players sits in the Tencent-operated ecosystem, where enforcement infrastructure differs; if the tally excludes China, the 0.2 percent ratio is overstated. The gray market for boosting will likely reprice rather than disappear, migrating to lower-enforcement titles. Riot now holds a full vertical stack: patch control, tournament control, kernel-level client access, and soon hardware identity. Without an independent arbitration layer, enforcement statistics should be read skeptically. The real question is not how many accounts were locked but how hardware identity will be used next. If Riot publishes periodic enforcement data with trend lines and appeals transparency, it could set an industry-standard integrity report. If not, the story remains open.