Nearly 300,000 League of Legends and VALORANT Accounts Locked: The Real Verdict Sits at the Hardware Layer

In September 2026, Vanguard — the kernel-level anti-cheat client Riot Games built for VALORANT — was embedded directly into the League of Legends client. No balance patch. No new champion. Just one more software process launching alongside the game on every player's machine.

Three months later, while scrolling the Korean server ladder to prepare a report on academy scouting, I logged a case more telling than any mainstream headline: a Diamond account stripped of ranked points despite its owner having clicked through every one of his own games. He installed no cheat software. He lent his account to nobody. He did not transfer ownership. He simply queued duo with a friend who was being boosted.

Offside traps are beaten by a bad pass. Here, the anti-cheat system drifted away from the player at the very moment his match was entirely legitimate.

Riot Games announced it had actioned nearly 300,000 League of Legends and VALORANT accounts for ranked manipulation. The collection window runs only a few months from the Vanguard integration date, not a full fiscal year. Annualized, the enforcement run-rate is materially higher than the headline implies.

By the publisher's own release, that equals roughly 0.2 percent of estimated monthly active players — about 120 million for League of Legends and 20 million for VALORANT, roughly 140 million combined. One caveat matters: the 120 million and 20 million figures carry no independent audit. They are floating estimates, and the 0.2 percent ratio is derived from them.

Three definitions must be separated to read this correctly.

Boosting: a highly skilled player logs into someone else's account to raise its rank. It is a paid service relationship with a seller, a buyer and a price.

Smurfing: playing on a secondary account. Riot states plainly that smurfing is not automatically cheating and enumerates eight legitimate use cases, including protecting the highest achievement on a main account.

Hitchhiker: Riot's term for a player who uses their own account but queues alongside an account being boosted. This group can lose ranked points already earned.

Riot also added ranked-point protection in matches containing a detected cheater or leaver, and published a verification roadmap: multi-factor authentication, TPM 2.0, hardware attestation, and the possibility of rank-differentiated requirements. The stated goal is to make disposable one-time accounts harder to create.

The ranked ladder is the admissions system for an entire industry

When an account is boosted into Master or Challenger, the distortion does not sit in the average player's experience. It sits in the scouting signal. Academies, tier-2 organizations and recruiters across Korea, Taiwan and Europe all use ladder rank as a primary filter before offering a tryout. When that filter is diluted, the screening cost of the whole system rises — and the parties paying are the recruiting organizations, not the service sellers.

The craftsman reads the numbers, the strategist reads the flow. At 0.2 percent, everyone sees something small. Look at where the contamination sits — the top of the ladder — and it becomes expensive. Rank-differentiated verification is an admission of exactly that: enforcement cost is concentrated where scouting and semi-pro visibility happen. It is a two-tier governance model, logically defensible, but it opens an equal-treatment question across player groups.

On the data side, ranked-point protection in cheater or leaver games carries the most weight. On small samples, players read it as compensation. On large samples, it compresses the variance of a match sequence, making ranked points a slightly more accurate skill signal. A minor technical change, but a structural statistical one.

Boosting is an economic relationship, not a personal vice

Boosting exists because it is a transaction. Buyers want rank badges, end-of-season rewards and social standing in the community. Sellers have skill but low income — and the bottom of the esports labor pyramid is the lowest-income layer in the whole system. Transfers do not buy players, they buy expectations. Boosting works the same way: it does not sell rank, it sells the social expectation attached to rank.

Account bans hit the supply side. The demand side — people who want the rank without the work — remains untouched. The standard outcome of any supply-side crackdown in a gray market is higher prices, fewer sellers, and the margin flowing to whoever survives. Without touching demand, Riot is optimizing half the equation.

A proper suspicion also belongs here: boosting sellers frequently overlap with semi-pro and tier-3 players who have genuine skill but no matching income. That is a structural feature of the esports labor market, not a personal morality problem.

Hardware-bound identity is the biggest change, and it is not in the headline

The three roadmap items — multi-factor authentication, TPM 2.0, hardware attestation — combine into something far larger than roughly 300,000 locks. They turn account count from a meaningless detail into a tracked attribute. When an account is bound to an identity chip on the motherboard, the cost of creating a second, fifth or tenth account spikes, and the resale market for old accounts — a gray economy Riot never monetized — contracts.

The model has precedent in traditional sport, where whereabouts rules apply more heavily to elite athletes. It also creates a problem nobody has put on the table: players on shared machines, internet cafe machines or second-hand hardware sit at a structural disadvantage. In some regions, that is a large group, not an exception.

For professional players, the direct consequence is that holding multiple accounts becomes a monitored attribute. Champion-practice accounts are listed among legitimate uses, but ambiguous cases — a pro queuing duo with a flagged account — are enough to generate bad headlines for a club. Teams should standardize account declaration before the rules tighten.

The rulemaker, the enforcer and the statistics publisher are the same party

Every quantitative figure in this story comes from one side. Riot writes the terms, operates the detection system, publishes the enforcement statistics, and commercially benefits when cheated-on players churn less. In a free-to-play model, a cheated-on player leaving is lost revenue, so anti-cheat spending reads as churn-prevention spending, and it is justified.

What is missing is the more interesting part: no false-positive rate, no description of an appeals process, no independent auditor confirming the enforcement figures. An action touching nearly 300,000 accounts without a published error margin cannot yet be called a complete process.

Alongside that sits the transmission into the content ecosystem. Channels built on boost-climbing or smurf content lose credibility, while identity-verified high-elo content gains relative value. For markets that trade on ladder-derived data, cleaner data is a positive signal, but the uncertainty merely relocates rather than disappears.

The gray market will move, not vanish

If League of Legends and VALORANT harden, boosting activity tends to flow toward titles with weaker enforcement. At industry level, the problem is displacement rather than elimination.

One variable remains unanswered in the source material. League of Legends and VALORANT in mainland China operate inside the Tencent ecosystem, with localized anti-cheat and account-verification infrastructure distinct from the global Vanguard rollout. Whether the nearly 300,000 figure includes, excludes or can be separated from that player group is an open question. If it is excluded, the 140 million denominator is inflated and the 0.2 percent ratio loses most of its measurement value.

Another structural shift deserves note: Riot now controls patch deployment, tournament governance, client-level system access, and soon hardware-level identity verification. That is the most complete vertical stack in esports, and it narrows the already thin space available for independent oversight.

The craftsman role never disappears, it is upgraded into a system

A new profession is forming at the edge of this story. As Riot extends Vanguard from cheat-software detection toward ranked-behavior control, it needs people who read rank distributions, spot anomalous match-history traces, and separate a legitimate smurf from an account being carried. That is analyst work, differing only in that the data turns over hourly rather than seasonally.

To me this is the most compelling part of the story and the least covered. Based on my experience tracking regional ladders and qualifier matches in Korea, one thing is clear: this industry is building behavioral governance infrastructure for hundreds of millions of accounts, and the job postings for that layer appear in no news report at all.

The counterintuitive angle

The community will argue about nearly 300,000 accounts, about smurfing, about whether Riot is doing what players demand. The counterintuitive point runs the other way: Riot is not banning smurfing as a behavior, it is banning boosting as a transaction, and it is extending liability to an innocent third party.

The hitchhiker doctrine is the most consequential element. It shifts the standard from "you violated the rules" to "you stood next to someone who did." In basketball, that is a referee sanctioning a player who never touched the ball because a teammate committed a foul. There is no operational precedent for that standard at the scale of hundreds of thousands of accounts.

The next overlooked element is data lag. All the release provides is a count of completed locks. No trend line, no prior-period comparison, no breakdown by title, no ladder-quality metric after enforcement. Without output data, nobody can verify effectiveness. An optimization problem where only the inputs are published.

And one more: the policy judges intent and behavior, not account count. That is a deliberately soft boundary, very hard to enforce consistently. The softer it is, the more it depends on automated judgment — which means more false positives.

Close

If Riot publishes enforcement data periodically with false-positive rates and an appeals process, it will set a new transparency standard for the industry. If it does not, what remains after a few months is a large headline, an unverifiable denominator, and a hardware verification layer nobody asked about. The variable for next quarter is not how many accounts were locked — it is whether an ordinary player can still create a new one easily.