Nearly 300,000 League of Legends and VALORANT Accounts Locked: Riot Games and the Epic of Ranked Integrity

I still remember a winter night in 2026, in a small café in Gangnam, when a young player told me he had paid someone to climb the ranked ladder for him. He said it as if it were an administrative procedure, as if the leaderboard were just a business card to send to academy teams. I stayed silent. People say women do not understand tactics; I answer with what I hear in the silences.

Three years later, on a morning, the figure of nearly 300,000 League of Legends (LoL) and VALORANT accounts locked for ranked cheating appeared on my screen. A governance statement, not a patch or a transfer deal. And like every statement, it carries both light and the half of shadow people usually fail to see.

In September 2026, Riot Games integrated Vanguard — the kernel-level anti-cheat originally built for VALORANT — into the LoL client itself. This is a system-level change, far beyond a champion balance tweak: how the LoL client behaves on players' machines, and with it, how Riot defines a "clean" account. Vanguard has long been controversial for its deep operating-system access, but that very depth makes it effective. Extending it from VALORANT to LoL turns a single-title tool into a platform-level governance layer. According to the original analysis, Vanguard is broadening its remit from fighting cheat software to policing behavior within the ranked system itself.

Three concepts form the backbone of the story. First, boosting — a high-skilled player logs into someone else's account to raise its rank. Second, smurfing — playing on a secondary account at a rank below one's true skill. Third, and the most notable new point, hitchhikers — players on their own accounts, breaking no software rule, but queuing alongside an account being boosted.

On the numbers, nearly 300,000 accounts sounds enormous. But set against an estimated 140 million monthly players across the two titles — roughly 120 million for LoL and 20 million for VALORANT — that figure is only about 0.2%. Note that both the 120 million and 20 million estimates carry no specific source in the original material, and the 0.2% ratio was calculated by the author. This is a provenance weakness readers should keep in mind.

A big absolute number, a small relative one. The headline shocks, while the body supplies the data to cool it down. As someone who has watched this industry for more than two decades, I believe the real value of this purge is not in the number of accounts locked, but in what it protects — the credibility of the leaderboard as a scouting channel.

The ranked ladder is the hidden qualifier system for the entire amateur-to-professional pipeline. When someone pays to climb, they buy more than a number. They are falsifying a scouting signal. Academy teams and tier-2 scouts who rely on rank to filter candidates now face a paradox: they cannot tell real talent from a business card bought with money. Riot tightening the ranked system therefore touches the integrity of the industry's very input data.

One notable technical detail is the ranked-points protection mechanism. When the system detects a cheater or a leaver, the remaining players in that game lose no points. A small technical change, but a big emotional one. It changes players' expectations about the value of a game: if you lose for objective reasons, you are no longer punished. In theory, this compresses variance and makes ranked points a more accurate skill signal over large samples.

Then I had to pause longer on another detail, one that made me re-choose every word. Riot announced it will revoke ranked points from hitchhikers too — players on their own accounts, breaking no software rule, simply because they queued alongside an account being boosted. This is a doctrine of liability by association and, to my mind, the most legally and ethically contestable element in the entire announcement.

Imagine a real scenario. You play every night with a close friend. That friend, for reasons unknown to you, has paid for a boost. The system detects the boost on your friend's account, and you — a legitimate player, queuing on your own account — lose all the ranked points accumulated in those games. This is not a far-fetched scenario. It opens an evidentiary question: by what standard does Riot classify a player as an intentional or unwitting "hitchhiker"?

Meanwhile, Riot itself lists eight legitimate smurf use cases, including protecting one's highest achievement on a main account. Riot's enforcement boundary rests on intent and behavior, not on account count. That is a soft line, very hard to apply consistently. It shows where community expectations and actual policy diverge: part of the player base wants an all-out crackdown on every form of secondary account, while Riot chooses a soft line based on purpose.

What is worth noting is that across all published information there is no false-positive rate, no description of an appeals process, and no third party auditing the 300,000 figure. Every quantitative claim originates from the enforcing party itself — Riot Games. This is a transparency gap disproportionate to the scale of the action. Riot is simultaneously the rule-maker, the enforcer, the data source, and the commercial beneficiary of enforcement. There is no independent arbitration layer. This is a structural fact inherent to publisher-run esports.

Another scenario worth weighing is the gray market. The economics of boosting run on two legs: demand from those who want a prestigious rank, and supply from high-skilled players — sometimes tier-2 or tier-3 pros — who need extra income. Strict enforcement removes neither demand nor supply. It raises the risk premium for suppliers, and by gray-market logic, that tends to push boost prices up rather than make the service vanish.

Further ahead than the current purge is Riot's plan for multi-factor authentication, TPM 2.0 and hardware attestation, plus verification requirements that may be applied differently by rank. TPM 2.0 is a hardware-security standard enabling device identification. If deployed, accounts become bound to physical hardware, and creating a "one-time" account becomes far harder. That is the truly pivotal change, not the 300,000 figure. If verification is applied more strictly at high ranks, we will see a two-tier citizenship model within the player base: the higher the rank, the tighter the identity control.

This is the point I believe the public underestimates. A hardware-attestation layer also raises questions of privacy and of fairness of access. Players on shared machines, players at internet cafés, players on aging devices — all may be structurally disadvantaged. This is a business and public-relations risk the announcement does not mention, and it touches a larger question: are we protecting a fair arena, or building a gate only those with enough means can pass through?

I return to the opening image. That young player in Gangnam, who told me about boosting as if it were paperwork — where is he now? Perhaps he has grown up, and learned that a business card never replaces real skill. Or perhaps he was swept into the gray market and became one of those nearly 300,000 locked accounts. I do not commentate the match; I recount what people choose to forget. And what people usually forget, in noisy purges like this, is the human beings behind each number.

I do not believe this story ends in a victory. Locking nearly 300,000 accounts is a move in the right direction, but it is not the answer. It is a pause in the music, a moment to breathe and look back. What decides the future of the ranked arena is not the number of accounts locked today, but whether the verification mechanisms to come are designed to protect players fairly. Elite sport has never been only about winning and losing; it is human tragedy. And a leaderboard is truly whole only when people can trust it without paying with their own privacy.