Riot Games locks nearly 300,000 League of Legends and VALORANT accounts for ranked cheating: The fight to reclaim the integrity of the ladder

When Riot Games announced that nearly 300,000 accounts had been locked for ranked cheating, the League of Legends and VALORANT communities immediately erupted. But the ball has stopped rolling, and the stream of numbers keeps flowing forward. The 300,000 figure sounds terrifying, yet when placed beside an estimated 140 million monthly players across both titles, the real ratio is only around 0.2%. A number so small that it makes many wonder: is Riot actually cleaning house, or merely seeking media attention? This article will go deep into a second-stage professional analysis derived from a document containing 23 information points, clarifying the nature of this account-ban campaign, the shifts in governance policy, and the real consequences for the esports ecosystem. From the viewpoint of an esports data analyst, I believe this is not merely another wave of account bans. This is a structural move: Riot is turning Vanguard from a software anti-cheat tool into a system-wide behavioral monitoring layer. The background begins in September 2026, when Vanguard – the kernel-level anti-cheat system first deployed on VALORANT – was integrated into League of Legends. Vanguard is not an ordinary gameplay balance patch. It runs at the highest privilege level of the operating system, reading and controlling processes at the hardware level. Expanding Vanguard from a tactical shooter to the world's largest MOBA is a systemic change, not simply adding another layer of security. According to the analysis, the roughly 300,000 locked accounts represent a cumulative figure since Vanguard was introduced to LoL, meaning less than a quarter or even less. Annualized, this number could be much higher. This suggests the enforcement intensity of Riot is rising quickly, rather than being a symbolic campaign. However, this number also carries a major weakness: all statistics come from a single source, Riot Games, with no independent third-party verification. In any esports report, this is a warning flag readers should note. Communities often call the targeted actors “ranked cheaters.” But in truth, the behavior being punished is not limited to software hacking. The focus of this crackdown is boosting – a service where a highly skilled player logs into another person's account to climb ranks for them. This activity has existed for years, forming a gray market worth millions, connecting the desire of some players for virtual rank with the income needs of semi-professional gamers at the bottom of the esports labor pyramid. More notably, Riot has defined a new term: “hitchhiker.” These are players who use their own accounts, violate no software rules, but actively queue with an account being boosted. Under the new policy, these individuals may lose ranked LP even though they did not cheat. This is an unprecedented standard of liability by association in the history of Riot games. I remember the 2026 World Cup, when I manually calculated xG for France's shots in their match against Argentina. I realized then that personally analyzed data is far more persuasive than emotion. Likewise, to understand this ban wave, we must look at numbers and policies, not emotional calls. Let us analyze layer by layer. The first layer is the nature of the system. The original Stage-2 analysis clearly states: no gameplay balance patch is mentioned. The change lies in the client infrastructure and account policy layer. Vanguard expands from fighting software cheats to controlling ranked-system manipulation. As a consequence, the cost of creating a new account will soar if Riot moves toward TPM 2.0 hardware authentication. In essence, this is an account-identity-level rework, far larger than an ordinary meta update. The second layer is the ranked ladder, which functions as an unofficial scouting system for the entire esports ecosystem. Academies, tier-2 teams and scouts still rely on in-game rank to filter talent. When boosting is widespread, scouting signals become noisy. A player who is actually Silver can climb to Challenger through a paid service, deceiving both the system and recruiters. Therefore, Riot's crackdown on boosting has an indirect positive effect on the reliability of scouting signals derived from the ladder. The third layer is the distinction between smurfing and boosting. Smurfing is creating a secondary account to play at a rank lower than one's true ability. Many players assume Riot will suppress all smurfs. But the truth is the opposite: Riot explicitly states that smurfing is not automatically considered cheating, even listing eight legitimate use cases, such as protecting one's highest achievement on the main account or practicing new champions. This shows Riot's boundary is intent-and-behavior-based, not based on account count. However, the “hitchhiker” policy runs against that permissive spirit. A player may inadvertently queue with a friend without knowing that the friend's account is being boosted. Under the new policy, the innocent player can lose LP despite playing legitimately. This is a due-process gap, and the most vulnerable point of the entire campaign. Without a clear appeals mechanism or disclosure of the false-positive rate, innocent players bear the risk created by cheaters. Another blind spot lies in regional structure. The analysis provides no regional breakdown. League of Legends and VALORANT in mainland China are operated under the Tencent ecosystem, which historically uses localized anti-cheat and account verification infrastructure distinct from the global Vanguard rollout. The question is: does the 300,000 figure include China servers? If not, the 0.2% ratio against 140 million players is inflated, because a large share of LoL monthly actives sit in the Tencent ecosystem. The denominator error is a serious issue. The figures of 120 million LoL players, 20 million VALORANT players, and a 140 million total are all unsourced in the document. This is a major provenance weakness. Without knowing where 140 million comes from, we cannot validate the seriousness of 300,000 accounts. As someone who regularly follows esports data, I believe we should treat these figures as directional, not as independently audited truth. As of this point, Riot simultaneously acts as rule-maker, enforcer, provider of enforcement statistics, and commercial beneficiary of enforcement. There is no independent arbitration layer. This conflict of interest is inherent to the publisher-run model, but in a campaign of 300,000 accounts, the lack of outside audit makes the numbers difficult to verify. That is why I often say: the crowd falls asleep in emotion; I stay awake with the data table. The fight against boosting also has an economic side. Analysts expect that aggressive enforcement will not make the boosting market disappear, but only raise the price. Supply – skilled gamers needing income – remains; demand – players wanting high rank for prestige or rewards – remains. When the risk cost rises, the value per transaction rises, and remaining operators can earn more per boost. This is a classic gray-market rule when supply is tightened. Look at the LP-loss protection numbers. Riot has introduced an LP protection mechanism when the system detects a cheater or a leaver. This mechanism reduces the element of luck in the ranked climb, making LP a slightly more accurate skill signal over large samples. This is a low-cost, high-visibility player-experience win. It may please players more than the 300,000 ban count. But there is an intriguing mismatch between media narrative and actual policy. The community expects Riot to punish all smurfs, but Riot's policy tolerates many cases. Conversely, the future aspects – MFA, TPM 2.0, hardware authentication, rank-differentiated verification – represent the biggest structural change. Yet these receive far less attention than the 300,000 figure. This gap between story and policy is worth watching. Rank-differentiated verification, as mentioned in future plans, will create a two-tier digital citizenship model. Higher-ranked players will face stricter identity checks. From a governance perspective, this can be justified because higher ranks have more influence over the scouting ecosystem. But it raises equality questions: why must a Diamond player prove hardware identity while a Silver player does not? And could this violate privacy laws in some countries? On the risk side, there are five hotspots. First, joint liability for players queuing with boosted accounts. Second, a lack of false-positive data and appeals mechanisms. Third, TPM 2.0 hardware authentication could hurt players using public computers or internet cafés, a very large population in LoL. Fourth, the boosting market does not disappear but reprices. Fifth, uneven enforcement across regions could create scouting quality divergence. One of the most important moments of this analysis is realizing the difference between absolute numbers and relative ratios. 300,000 sounds huge, but divided by 140 million it is a grain of sand. The analyst warned not to let absolute numbers drive emotion. This is like a shot with low xG that still goes in: many will look at the goal and forget the overall probability is tiny. The shot may hit the net, but its xG only whispers. From an industry perspective, there are four transmission effects. First, Riot is creating a cross-title anti-cheat standard. Vanguard is no longer a VALORANT-only tool; it becomes a platform-level governance layer. Second, other publishers may be forced to upgrade their anti-cheat programs to keep up. Third, streaming content related to boosting and casual smurfing will face friction, while verified high-elo content becomes more valuable. Fourth, cleaner ranked data can help esports betting and odds markets become more trustworthy. But transmission has a dark side. If boosting operators are pushed out of LoL and VALORANT, they may migrate to other titles with weaker anti-cheat systems. The industry-level problem may not be solved; it may only be displaced. This is a key difference between treating symptoms and treating root causes. The root cause is demand for unearned high rank, and the supply is underpaid semi-pro players in lower-tier competitions. Regarding club finances, the analysis finds no direct impact. But from a platform economics angle, the spending on Vanguard, MFA and hardware authentication is an investment to protect revenue. In a free-to-play model, players annoyed by cheaters tend to churn, reducing microtransaction revenue. Preventing that is a retention strategy, not a direct revenue generator. This explains why Riot is willing to absorb the cost. However, that cost may create a hardware accessibility issue. TPM 2.0 is a security hardware standard. When accounts are bound to hardware, players using internet-café machines, borrowed computers, or older systems without TPM 2.0 may face access friction. In many developing countries, where cybercafés are a lifeline for LoL players, this could create a major barrier to entry. Riot must clearly announce exceptions before deployment or risk severe community backlash. In the short term, the account-ban story will cool down after 1-4 weeks unless Riot publishes periodic enforcement data. But the long-term issue remains identity architecture. If Riot successfully implements MFA and hardware authentication, the cost of creating a new account will spike. This not only deters cheaters but may also reduce the number of returning players, because they are unwilling to go through a cumbersome verification process. There is a question of market effectiveness. When boosted accounts are locked, what replaces them? The answer is new accounts, created through more sophisticated methods. Riot must run an endless race. This leads to an important conclusion: no anti-cheat campaign is ever final. It only raises costs for adversaries. Emotion buys the ticket; data pulls it back. Looking at the big picture, what stands out to me is not the 300,000 number, but the expansion of publisher power. Riot now controls patches, tournaments, client systems and hardware attestation. This is the most complete vertical stack in esports governance. It brings efficiency, but also narrows the space for independent oversight. This is a trade-off that deserves honest examination. The biggest mistake is not betting; it is betting with the crowd. The crowd may think that 300,000 banned accounts means the ladder is clean. But the truth is more complex: without false-positive data, without an appeals mechanism, without independent audit, we cannot confirm cleanliness. All we see is a number published by the enforcing party. Imagine this scenario: a player queues with two friends, one of whom is using a boosting service without the others' knowledge. All three win a match. The system detects the boosted account and revokes LP for the whole group, including the innocent player. When that person submits a support ticket, will Riot provide evidence of intent? The analysis document provides no information about the appeals process. This transparency gap is disproportionate to the scale of 300,000 accounts. Professional teams also need to be careful. Many pros have secondary practice accounts. Riot says these are protected if the purpose is legitimate. But the line between practice and assisted climbing can blur. If a pro is found queuing with a flagged account, the club could face media risk. Clubs should proactively declare account rosters and establish duo-queue hygiene policies. Another point worth stressing: the tendency of gray markets to escape. When Riot bans accounts aggressively, boost providers will raise prices and demand payment through harder-to-trace channels. They may use legitimate-looking hardware, create new accounts more frequently, or hire players in regions with lower enforcement intensity. This creates divergence between servers. On the media side, the analysis notes a strange absence: no community reactions, no quotes from professional players, no critical experts. The entire story is framed from the publisher-as-enforcer perspective. This suggests the original article was shaped by a press briefing, and the only pushback is a small number at the end: 0.2%. The truth is, Riot is walking a fragile line. On one hand, cleaning up boosting is necessary to keep the ranked system honest. On the other, using Vanguard and hardware authentication creates a surveillance framework that could extend to other behaviors besides cheating. Could Riot later use it to punish verbal abuse, attitude, or sportsmanship violations? This is a slippery slope that deserves monitoring. If enforcement data is published periodically, Riot could establish a de facto industry reporting standard. This parallels how traditional sports developed anti-doping reporting norms. But whether Riot wants that is unknown. The 300,000 figure may be a one-off disclosure, or the start of a regular reporting cycle. If it is regular, pressure for transparency will increase. From the player perspective, I believe the LP protection mechanism is the true bright spot of the campaign. When the system detects a cheater or leaver, players do not lose LP. This greatly reduces the feeling of injustice. Ranked climbing is full of randomness, and LP protection brings psychological safety. Arguably, this policy will have more positive community impact than the ban count. However, that psychological safety is threatened by the “hitchhiker” standard. For an ordinary player, losing LP for queuing with a boosted account – whether intentional or not – is a nightmare. Riot must be transparent about the evidentiary standard: how can it know a player deliberately rode the boost or merely happened to queue together? Without an answer, players may self-censor their duo behavior, leading to social isolation. There is a hidden story behind the numbers: the pandemic and the return. When the summer of 2026 suspended all tournaments, I learned to listen to sports through numbers. It was then that I realized data models can outlast a season. Likewise, Vanguard and TPM 2.0 can outlast a media campaign. They change forever how accounts are created and operated. Finally, we must revisit the definition of “success” for this campaign. If success is measured by accounts locked, 300,000 is a major achievement. If success is measured by match quality, we have no data yet. If success is measured by procedural fairness, we are almost blind. These are three completely different metrics, and mixing them will lead to false conclusions. Remember, a single misstep is a tragedy; a series of missteps is a signal. Similarly, one wave of bans cannot reflect the entire health of the ranked system. What needs to be tracked is the trend: whether detected boost accounts increase or decrease over quarters, whether the false-positive rate is disclosed, and whether high-rank match quality improves. In that context, this article does not aim to conclude that Riot is right or wrong. It points out that numbers must be read with context. 300,000 locked accounts is a real event, but it does not itself explain the true level of cheating. More importantly, it does not explain the future of account verification. That future lies in the MFA, TPM 2.0 and rank-differentiated requirements – the things most news reports ignore. From a silent summer, I learned to listen to football through numbers. Now, in the esports world, I also learn to listen to Riot through numbers. The 300,000 figure does not move me. What interests me is how it was produced, who verified it, and what it changes in the industry's operation. The ball may stop, but the data curve never stops. For now, we should ask Riot: When will they publish the false-positive rate? When will they publish the appeals mechanism? When will they roll out MFA and hardware requirements? And most importantly: will enforcement data be published periodically or just as a press release? The answers will shape how we evaluate the entire campaign over the next 12 months. For those who think banning 300,000 accounts ends the matter, look at the boosting market before and after the ban. I bet prices will rise. I bet channels will become more sophisticated. And I bet low-ranked players will still dream of the Challenger badge they do not deserve. That demand is a market force that never disappears. One final word: be wary of numbers published by one party. This does not mean Riot is lying. It only means they have a direct stake in the story. In an ecosystem lacking independent auditors, the job of journalists and analysts is to keep a healthy distance from press releases. We need more voices, more data, and more transparency from publishers. Another point about personnel: the only spokesperson in the document is Phillip “mirageofpenguins” Koskinas, a Riot Games employee who spoke about smurfing. The absence of professional players, coaches and tournament operators turns the original article into a one-sided news release. I hope future esports journalists will spend time interviewing everyday players – the ones truly affected by this policy. There is a small but important detail: Riot says it protects “highest achievement” on the main account. This means they admit some players deliberately derank on secondary accounts to play with lower-ranked friends. That is a pragmatic acknowledgment of a cultural reality that cannot be erased. Riot's boundary is more like a managed gray zone than a rigid line. This may make enforcement inconsistent. In the long run, if Vanguard is used to analyze social behavior – such as detecting toxic chat – then the anti-cheat scope merges with community control. That is a possibility worth watching. Publishers will say it improves experience; players will say privacy is violated. This debate has only just begun. Every match is a confession of probability. When an account is locked, we do not know whether it was a player who paid to climb, an innocent queue partner, or a false conviction. Riot must provide data on false-positive rates and an appeals process immediately. Otherwise the credibility of the entire system will be questioned. I do not believe in destiny; I believe in the data curve. And the data curve of this story shows: the 300,000 number is smaller than it appears, publisher power is larger than it appears, and the future of game accounts will never be the same. Let us wait and see how Riot implements its MFA and TPM 2.0 promises, and watch whether internet-café players are left behind.