Riot locks nearly 300,000 ranked accounts: when Vanguard shifts from cheat detection to behavior control

In September 2026, after a late-night broadcast in Incheon, I stayed back in the studio with a screenshot sent by a scout. The top of the Korean server's ranked ladder was missing several familiar names — the accounts he still used as benchmarks against young players' statistics. He sent one line: "Where did these guys go?"

It took a few weeks before I had an answer solid enough to put on air. Riot Games announced it had actioned nearly 300,000 League of Legends and VALORANT accounts for cheating behaviour in ranked play. Fans see a single button press; I see 21 sleepless nights. The 300,000 figure is big enough to carry a headline, but it accounts for roughly 0.2% of an estimated 140 million monthly players across the two titles. That ratio is a starting point, not a conclusion.

Throughout my career I have kept one habit: never broadcast a number that has not cleared three independent sources. Once I stayed silent for 21 days before reporting a loan deal — 21 days without publishing a single line, so that today I could tell an entire chapter. The same applies to Riot's announcement: it is a timestamp, and the rest of the work belongs to whoever verifies it.

Vanguard — anti-cheat software running at the operating system kernel level — originally belonged to VALORANT. In September 2026, Riot integrated it into League of Legends. This is a system-level change, not a champion balance patch. No meta statistic was touched; what was touched is how the game client behaves on a player's machine.

Three categories of behaviour sit inside this enforcement. Boosting is a service in which a highly skilled player logs into someone else's account to climb the ladder. A hitchhiker is someone using their own account but queuing alongside an account being boosted — Riot may revoke their ranked points even though they broke no software rule. Smurfing is playing a secondary account, and here the line is drawn softly: it is not automatically treated as cheating, and a list of legitimate use cases is enumerated, including preserving one's highest achievement on a main account.

Alongside this, Riot is deploying loss protection when a match is found to contain a cheater or a leaver, and has announced plans for multi-factor verification, hardware attestation via TPM 2.0, and verification requirements that may be applied differently depending on a player's rank.

There is a shift here that deserves to be named properly. Vanguard was built to hunt cheat software. Extending its remit to boosting, hitchhiking and smurfing means the anti-cheat tool is being used as behavioural enforcement infrastructure. Riot is turning anti-cheat software into a shared governance layer across two titles, and the ranked ladder has become a governed object rather than simply a playground.

Why does the ladder warrant this scale of action? Because it is the de facto selection system. No academy recruits by reading a profile; they read a rank. When an account is boosted upward, it injects noise into precisely the signal scouting departments filter on. Boosting harms the experience of amateur players, and it also degrades the quality of talent-identification data. For academies in Korea or Vietnam, that means evaluation criteria may need reweighting toward scrim and tournament evidence rather than rank alone.

Read through an economic lens, the picture sharpens. Demand for boosting comes from rank prestige, seasonal rewards and ego. Supply comes from highly skilled players who need income — a meaningful share of them low-tier competitors whose salaries do not cover living costs. Mass account action raises the risk premium for sellers, pushing service prices up, but does not touch supply and demand. The usual outcome in grey markets is that prices rise rather than goods disappearing.

At 0.2%, the denominator deserves scrutiny too. The two figures used to compute that ratio — roughly 120 million monthly League of Legends players and roughly 20 million VALORANT players — are not attributed to any specific source in the original material. In mainland China, both titles run inside Tencent's ecosystem with separate anti-cheat and account-verification infrastructure. If the 300,000 figure covers the global market excluding China, then a 140 million denominator overstates effective coverage, and the 0.2% ratio is skewed in favour of the party publishing it. 47 pages of data during the pandemic — when the world stopped, I kept scrolling the spreadsheet — taught me that every market number has a hidden denominator behind it.

The biggest blind spot sits in how the story is framed. Three hundred thousand accounts is an impressive absolute figure; the change that genuinely carries weight for players gets far less attention: hardware attestation and the doctrine of associate liability.

Hitchhiker policy is the most concerning item. Riot is asserting the right to revoke ranked points from people using their own accounts, who broke no software rule, purely because they queued beside a flagged account. This expanded associate-liability standard widens the penalty perimeter without accompanying information on false-positive rates or an appeals process. For an enforcement wave at the scale of hundreds of thousands, the absence of both is a significant transparency gap.

Then there is the power structure. Riot is simultaneously the rule-maker, the enforcing body, the provider of enforcement statistics, and the commercial beneficiary of enforcement. No independent arbitration layer exists in that chain. It is an inherent feature of publisher-run esports, but it means every number in the announcement should be read as a directional claim, not audited data.

The hardware-verification plan creates a two-tier citizenship model inside the game: the higher the rank, the stricter the verification requirement. As governance, this is defensible — high stakes warrant close checks. From a player perspective, it raises equal-treatment questions, and it runs into a reality across many Asian markets including Vietnam: not everyone plays on their own machine. Internet cafés, shared devices, older hardware — device-bound verification may push a portion of legitimate players to the margins rather than only stopping cheaters.

One more under-discussed risk: professional and semi-professional players routinely maintain practice accounts, which Riot protects in principle. But when the evaluation standard shifts toward behaviour and association, a duo queue between two pros where one account is flagged can become a headline problem for an entire club. Teams should standardise account-declaration and duo-queue hygiene policies before they are forced to react.

Riot has chosen the right direction in tightening ladder quality, and protecting points when a match contains a cheater is the kind of improvement players feel immediately. But what deserves tracking over the next six to eighteen months is not the ban count. It is the disclosure cadence: one-off or periodic. It is the price of boosting services in the grey market — if it spikes, the displacement-rather-than-elimination thesis is confirmed. And it is the final specification of hardware attestation: whether a carve-out for shared machines exists. A wrong number can be forgiven, but a reputation lost is hard to recover — true for players and publishers alike.