Nearly 300,000 League of Legends and VALORANT Accounts Locked: Riot Games Shifts from Software Cheat Detection to Ranked Behaviour Enforcement

In September 2026, Vanguard - the kernel-level anti-cheat system long tied to VALORANT - was officially integrated into the League of Legends client. Roughly a quarter later, Riot Games announced it had actioned nearly 300,000 accounts across both titles on ranked-manipulation grounds.

Having spent years covering LCK events from the sidelines in Incheon, I watched young players climb the ladder as the only pathway into a scout's field of vision. Every rank promotion was a ticket. When that ticket can be bought with money, the entire development system behind it collapses. That is why this story reaches far beyond a routine ban announcement.

Separating the number from the headline

The Vanguard integration into League of Legends landed in September 2026. Counting from that point to publication, the roughly 300,000 figure most likely reflects a cumulative enforcement tally across about one quarter, not a full year. Annualised, the figure would be substantially higher. Most coverage skips this detail when writing its headline.

On relative scale, estimates put League of Legends at around 120 million monthly players and VALORANT at around 20 million, for roughly 140 million combined. The share of accounts actioned sits near 0.2%. That is small, and the source article itself concedes as much.

The unresolved problem sits in the denominator. The 120 million and 20 million figures are attached to no specific source. They appear as estimates and as reputed numbers. In data journalism, a source-less denominator is a serious weakness, turning the 0.2% into a directional figure rather than an audited one.

Then there is geography. League of Legends in mainland China runs inside the Tencent ecosystem, with anti-cheat and account verification infrastructure separate from the global Vanguard rollout. Whether the 300,000 figure includes Chinese servers remains unresolved. If it is a global-ex-China number, the 0.2% ratio is overstated, because a large share of League of Legends monthly actives sit inside the China ecosystem. An error in the denominator skews the entire calculation, and the source article never raises this.

Three concepts shaping the entire enforcement wave

Boosting is a service in which a highly skilled player logs into another person's account to raise that account's rank. It is the directly targeted behaviour, and there is nothing new about it.

Smurfing is playing on a secondary account, typically at a lower rank than one's true skill level. Riot Games states plainly that smurfing is not automatically treated as cheating. Phillip 'mirageofpenguins' Koskinas, a Riot staff member, addressed the question directly. Riot enumerates eight legitimate uses of secondary accounts, including protecting a player's highest achievement on their main account. Riot's enforcement boundary therefore rests on intent and behaviour, not on account count. That is a soft line, and soft lines are the hardest to enforce consistently.

Hitchhiker is the most notable term. This is a player using their own account, but queuing alongside an account being boosted. They did not log into anyone else's account. They broke no software rule. Yet they may lose ranked points earned in affected games. This is an expansion of liability by association - the single most contestable ethical standard in the entire story. It pushes false-positive risk onto entirely innocent players, purely because they queued with a friend who happened to be boosted. A player abiding by the rules, running no suspicious software, sharing no password, can still lose points because of someone else's conduct. What happens in a false positive? Riot does not say.

For repeat offenders, Riot applies heavier penalties: multiple accounts suspended, and in some cases the main account as well.

Point-protection mechanics and a tiered governance model

Riot also rolled out ranked-point protection: players do not lose LP when a match is found to have contained a detected cheater or a leaver. This is a change with a clear expected-value shift - it reduces the penalty for unlucky games, compresses variance, and over large samples makes LP a marginally more accurate skill signal. By design it is a low-cost, high-visibility tool, likely to improve player sentiment more than the ban count does.

The enforcement wave carries a structural layer too. Verification requirements may be applied differently depending on a player's rank. The higher the rank, the stricter the requirement. The model resembles tiered compliance regimes in traditional sport, where whereabouts rules apply more heavily to elite athletes. The key point is that enforcement cost is concentrated at the top of the ladder - precisely where scouting and semi-professional visibility occur. A corrupted ladder directly threatens the reliability of scouting signals, not merely the casual player experience.

But the longer horizon is far larger. Riot is planning multi-factor authentication, TPM 2.0 requirements, and hardware authentication. The goal is to make one-time accounts harder to create. If hardware is bound to account identity, the cost of creating a new account spikes. In several jurisdictions, linking identity to a physical device intersects with personal-data regulation. An access-equity issue also surfaces: players on shared machines or internet-café computers may be structurally disadvantaged by device attestation requirements.

The economics of boosting: why tightening alone is not enough

The economic driver behind boosting is the income gap at the lower tiers of the esports labour pyramid. Some high-skill players, often at semi-pro or tier-2, tier-3 levels, seek extra income by carrying others up the ladder. Enforcement raises the risk premium but removes neither demand nor supply. Supply-side enforcement alone typically pushes boosting prices up rather than making the market disappear. This is a standard outcome of supply-side enforcement in gray markets.

Operationally, an unresolved contradiction exists. Many professional players maintain dedicated practice accounts. These accounts are explicitly protected under policy. But they sit close to the enforcement boundary. An ambiguous case involving a pro queuing with a flagged account could create headline risk for an entire club. Clubs should fold this into their internal account-management protocols.

The counterintuitive angle: when the ruler also makes the rules, enforces them, and profits from them

Riot Games is simultaneously the rule-maker, the enforcement body, the source of enforcement statistics, and the commercial beneficiary of enforcement. There is no independent arbitration layer in between. This structural conflict is inherent to the publisher-run esports model, and the source material never addresses it.

The source article provides no false-positive rate, no description of an appeals process, and no independent verification of the 300,000 figure. At a scale of 300,000 accounts, the absence of all three is a worrying transparency gap. An enforcement wave presented as unambiguously correct is a framing consistent with reporting sourced from the publisher itself. The absence of any community, pro-player, or critical-expert voice reinforces the reading that the source article was substantially shaped by a publisher briefing.

Rank-tiered verification creates a two-tier citizenship model within the player base. In governance terms this is defensible - higher stakes at higher ranks. But it raises an equal-treatment question, and it is precisely the kind of discretionary rulemaking that the source article's own framing under-examines.

They tell me to break the mould, but I am only searching for the lost mould of a decisive final. The mould here is a publisher holding both the scales and the purse. Nothing under the esports sky is new; we merely choose when to look at it directly.

Transmission across the industry

Riot is turning anti-cheat into cross-title infrastructure. Extending Vanguard from VALORANT to League of Legends converts a single-title tool into a platform-level governance layer. The direction shows the remit broadening from software-cheat detection toward ranked-manipulation behaviour control. That raises the bar for rival publishers' integrity programmes.

The most under-appreciated transmission channel is the amateur pipeline. If ranked integrity improves, ladder-derived scouting signals become more trustworthy - a net positive for academy recruitment and tier-2 development globally. Conversely, if enforcement is uneven across regions, talent-identification quality diverges by server.

Transmission into the betting and gray-zone market is two-directional and ambiguous. Cleaner ranked data improves the reliability of any ladder-derived market signal. But boosting operators pushed out of a hardened League of Legends and VALORANT environment may migrate to lower-enforcement titles. The industry-level problem is displaced, not solved.

Meanwhile publisher power keeps concentrating. Riot holds patch control, tournament control, client-level system access, and hardware-level identity attestation. This is the most complete vertical stack in esports governance, and it narrows the already-thin space for independent oversight.

We are not short of great matches; we are short of stories told fully enough. And the real story here is not the 300,000 - it is who is redefining what counts as a legitimate player.

Conclusion: when the roar becomes a drop of echo falling in an empty arena

There is a paradox in all of this. Cleaning up the ladder is the right thing to do. But the way it is covered focuses on an impressive number, while the genuinely structural changes - hardware-bound identity and hitchhiker-style liability - receive far less attention.

I once sat in silent arenas in 2026, when the pandemic wiped out every live event, and watched home advantage fall from 52.3% to 48.1% across 387 K-League and LCK matches. 2026 taught me that an empty stadium is its own kind of law of the heartbeat. Now, as Riot redefines who is a legitimate player and who is a cheater, the central question is no longer how many accounts were locked, but whose ladder is being built.

Meta is not for worship, it is for swimming upstream. If fairness is the real goal, publishing the false-positive rate, the appeals process, and an independent audit layer would be worth more than any account-lock number. Otherwise we are merely trading one form of cheating for another form of injustice - and the boosting market will not vanish, it will simply get more expensive.