Nearly 300,000 League of Legends and VALORANT accounts locked for ranked cheating: The 0.2% number and the policy shock behind it

In late September 2026, Vanguard — Riot Games' famous kernel-level anti-cheat software — was officially integrated into League of Legends servers after years of presence only in VALORANT. Within less than one quarter, the game publishing giant announced a number that caught everyone's attention: nearly 300,000 accounts across both titles were locked for ranked system manipulation. On the surface, the number sent shockwaves through the global gaming community. But when placed against an estimated 140 million monthly active players — 120 million from League of Legends and 20 million from VALORANT — the story changes completely. The actual ratio is only about 0.2% of the total player population. A local club taught me to read matches before reading the spreadsheets; from that perspective, I realize the shocking ban number is not the main message. The main message lies behind the numbers — where Riot is quietly redrawing the entire digital identity map of its players. To understand why an action targeting less than 0.2% of the population could create a structural earthquake in the esports ecosystem, we need to look at the broader context. Boosting — the service whereby a high-skilled player logs into someone else's account to raise their rank — has become a significant underground economy in the League of Legends community. Clients pay for higher ranks, end-of-season rewards, or simply to validate themselves. On the supply side are semi-professional players — gamers whose skills tower above the majority but who haven't quite reached the level needed to enter the professional arena — treating boosting as supplementary income in an esports labor market that pays tier-2 and academy players poorly. The new term 'hitchhiker' introduced in this enforcement wave marks a notable development. Hitchhikers do not log into boosted accounts. They keep their own accounts but deliberately queue with a boosted account in ranked games, benefiting from winning streaks and inflated LP gains. Riot views them as a link in the manipulation chain and asserts the right to revoke ranked points from these players. Vanguard — anti-cheat software operating at the kernel level of the operating system, where it has full hardware access — previously sparked heated privacy debates when first applied to VALORANT. When extended to League of Legends in September 2026, Vanguard no longer simply hunted for software cheats. It began tracking and punishing ranked system manipulation — an unprecedented expansion of control from a major game publisher. Based on my years of experience watching ranked matches unfold across multiple regions, this is the first time a major publisher has publicly declared an expansion of anti-cheat scope from software to social behavior within the game. And this is not merely a one-off crackdown — it is the beginning of an entirely new account governance regime. There are three significant policy changes Riot has embedded within the statistical noise, and they deserve far deeper analysis than the 300,000 number. First, the 'hitchhiker' doctrine. This is the largest shift in legal liability Riot has ever executed in ranked system governance. Previously, enforcement targeted the account owner who cheated or the software cheater. Now, a player who violated no software rules — no hacks, no boosting purchases, no logging into another's account — can still have ranked points revoked simply for having queued with a boosted account. Riot imposes a 'joint liability' standard across the entire group of players who queue together. This creates unpredictable risk: innocent players who happen to party with a friend secretly using boosting services could lose LP without ever knowing why. No official false-positive rate has been published, and no clear appeal process has been described. Second, smurfing policy. Contrary to the expectations of a significant portion of the community, Riot explicitly states that smurfing — playing on secondary accounts ranked below one's true skill level — is not automatically considered cheating. Phillip 'mirageofpenguins' Koskinas, a Riot Games communications staffer, confirmed there are many legitimate reasons to play on alternate accounts. Eight cases are listed, including practicing with friends of lower skill, testing climb pacing without affecting the main account, building a separate play rhythm, and notably 'protecting one's highest achievement on the main account' — where players do not want their primary ranking at risk while experimenting. This means Riot's enforcement boundary is based on behavior and intent, not account count. A soft boundary like this is extremely hard to enforce consistently, but it also prevents a community revolt that would surely follow a blanket ban on alt accounts — a common habit of both casual and professional players. Third, the next-generation identity verification plan. Riot announced plans to implement multi-factor authentication (MFA), followed by the TPM 2.0 hardware security standard and physical device attestation. More importantly, verification requirements may be differentiated by rank — players at higher tiers would face stricter identity checks. This is the deepest structural impact of the entire crackdown: when accounts are bound to physical hardware, the cost of creating 'one-time' accounts for cheating or griefing rises to economically unviable levels. The stated goal is making it harder than ever for offenders to 'escape the monitoring net' and start over. Another notable adjustment is the ranked-point protection mechanism. Riot states that players will not lose LP in matches where a cheater or leaver is detected. Mathematically, this reduces variance in the climbing journey of honest players, making LP a more accurate skill signal over time. It's a small change with large ripple effects: when the ranked ladder becomes more trustworthy, the entire scouting ecosystem — academies, tier-2 teams, talent identification programs — benefits. Conversely, if enforcement is uneven across regions, scouting signal quality will diverge by server, creating a new type of information asymmetry in the transfer and recruitment market. World Cup 2026, I built my xG model by hand; now I build with discipline. And that data discipline gives me a different view from how most articles are handling this story. The 300,000 banned accounts figure sounds impressive, but it has no baseline for comparison. We don't know whether this is higher or lower than previous enforcement waves, we don't know the distribution across the two titles, we don't know the re-offense rate. The only thing we can confirm is that this number reflects the effectiveness of a new anti-cheat system within a very short window since Vanguard's integration into League of Legends. If the accumulation rate occurred within less than one quarter, the annualized figure would be considerably higher. But even if the annual number reaches one million accounts, the corresponding ratio would still sit below 1% of the total player population — small enough to ask whether this crackdown truly addresses the root of the problem. There is a far bigger issue most discussions are missing: this crackdown does not address the underlying economic drivers of boosting. On the demand side, players still want high ranks, end-of-season rewards, and the feeling of recognition within the community. This demand does not disappear when risk increases — it simply shifts to darker, harder-to-detect channels. On the supply side, boosting providers — often semi-professional players at the bottom of the esports labor pyramid — still need income. They are typically underpaid at tier-2 teams or academies, and boosting becomes an essential income supplement. When Riot raises the risk cost, the market does not disappear — it simply reprices. Boost prices will rise to absorb the new risk, and surviving operators will earn higher margins per transaction. This is the classic consequence of supply-side enforcement in gray markets: displacement, not elimination. Now for the most uncomfortable part, the part few in gaming media dare to say directly. The real story is not 'Riot punishes cheaters.' The real story is that Riot is building a two-tier citizenship model within its player base. Those who climb to high ranks will face stricter identity verification, hardware-bound accounts, and deeper behavioral monitoring. Average players at lower ranks face none of these constraints. In governance terms, such a system can be justified by the same logic as 'high risk, high control' — but it still raises fundamental questions of fairness. Players in low-income countries, internet-café users, or those who share devices with family — all could be structurally disadvantaged in a system where accounts are hard-bound to hardware. What's more concerning is that Riot is simultaneously rule-maker, enforcer, source of enforcement statistics, and commercial beneficiary of the entire process. There is no independent arbitration layer between publisher and player. No official figures on wrongful conviction rates. No description of an appeal process. No third-party audit of the 300,000 number. An enforcement mechanism of this scale that lacks the three pillars of transparency, appeal, and independent audit is, by nature, a system without checks and balances. With such a large figure, this governance vacuum becomes even more alarming. Professional players maintaining practice accounts — explicitly declared legal — sit dangerously close to the enforcement boundary. A high-profile wrongful ban of a famous pro caught queueing with a flagged account could generate a media storm far greater than any benefit this crackdown brings. So the biggest question is not whether Riot can win the war on cheating. The biggest question is: in this sweeping overhaul of digital identity, who will be protected, who will be left behind, and who will pay for the system's mistakes? The quiet of 2026 was not an abyss; it was where old data began to tell new stories. And the story Riot's data is telling right now may well be very different from what they want the public to hear. When TPM 2.0 and hardware attestation officially arrive, we will know the answer — but by then, it may be far too late to ask the question.