Riot Games locks nearly 300,000 League of Legends and VALORANT accounts for ranked cheating

When Vanguard – Riot Games' kernel-level anti-cheat software – was officially installed on League of Legends servers in September 2026, few believed it would create a major shock. But the announcement of nearly 300,000 accounts locked for ranked cheating across both League of Legends and VALORANT marked the first time Riot expanded Vanguard's scope from pure software-cheat detection to controlling ranked-system manipulation. This is not just a wave of punishment – it is a declaration that Riot stands with legitimate players, but it also raises unprecedented questions about privacy and justice in the esports ecosystem. The gaming community is used to meta patches, champion changes, or item updates. But this article is not about gameplay meta. It is about how Riot uses Vanguard – the anti-cheat tool already proven effective in VALORANT – to crack down on boosting services, hitchhiker accounts, and behaviors that undermine the fairness of the ranked ladder. In the past, Vanguard focused only on detecting cheating software like aimbots, wallhacks, or scripts. Now, it also monitors behavior: who is climbing ranks for someone else, who is intentionally deranking, and who is queuing with a boosted account. According to data from the article, roughly 300,000 accounts were actioned, most of them League of Legends accounts, with the rest belonging to VALORANT. The number sounds large, but compared to roughly 140 million monthly players across both titles (120 million LoL, 20 million VALORANT), it represents only about 0.2%. In other words, 'nearly 300,000' locked accounts is actually a very small figure relative to the overall community. But the issue is not the absolute number – it is the direction Riot is charting: they are not just stopping at banning violating accounts, they plan to tighten the entire player identity system with MFA, TPM 2.0 hardware authentication, and rank-differentiated verification requirements. The core point most other articles miss is that Riot is creating a two-tier governance model. Players at high ranks will face stricter identity checks, while low-ranked players are barely affected. In theory, this can protect the top of the ladder – where scouts and semi-pro teams search for talent. But it also raises an equality question: why must a Diamond player verify hardware while a Gold player does not? Will an internet-café player be disadvantaged when their device does not meet TPM 2.0 standards? These are issues the original article does not address, but they will become hot topics in the community over the next 6-12 months. The 'hitchhiker' concept in the article is one of the most notable innovations. By Riot's definition, a hitchhiker is a player using their own account but queuing together with an account being boosted. They violate no software rule, yet they can still lose LP. This is a liability-by-association doctrine unprecedented in esports history. If you are a regular player and accidentally queue with a friend who is being boosted, you could lose points without a clear appeals mechanism. The article provides no data on false-positive rates, appeals procedures, or the evidentiary standard for classifying someone as a hitchhiker. This is a serious governance gap. Contrary to community expectations, Riot does not declare smurfing a cheating offense. Players creating alt accounts to practice, to play with lower-ranked friends, or to protect their main account's highest achievement – all these cases are permitted. Phillip 'mirageofpenguins' Koskinas, a Riot representative, listed eight legitimate use cases, including preserving a main account's highest rank from competition. This shows Riot's boundary is intent-based and behavioral, not account-count-based. This is a deliberately soft line, very hard to enforce consistently – but at least it shows Riot understands that not every alt account is harmful. As for the boosting service operators – the 'silent heroes' of the semi-pro tier – they face a worst-case scenario. Their main accounts get locked. LP is revoked. And with hardware authentication plans, creating new accounts becomes far more difficult. Currently, a booster might only lose a cheap alt account. But with TPM 2.0, their identity becomes tied to computer hardware. That turns an 'account ban' into a 'platform-wide lifetime ban' in all but name. Based on my 10 years of watching matches, there is one lesson I have learned: the crowd is never wrong, but they always arrive last. When Riot announced the 300,000 figure, the community applauded. But the most notable thing is not that number – it is that Riot is building a hardware identity infrastructure for their entire ecosystem. For the first time in esports history, a publisher holds the entire governance value chain: patch control, tournament control, system-level access, and soon hardware identity control. This may be good for competitive integrity, but it also concentrates power in a concerning way. Another question nobody answers: does the 300,000 figure include the China server? The Tencent ecosystem operates LoL and VALORANT in China with its own anti-cheat infrastructure. If this figure is global ex-China, then the 0.2% ratio in the article may be distorted by an inflated denominator. Unless Riot clarifies this, subsequent analyses stand on sand. Economically, the drivers of boosting do not disappear. On the demand side: players want high ranks for prestige, season rewards, and ego. On the supply side: semi-pro players at the bottom of the esports pyramid need income. When Riot tightens enforcement, boosting prices rise, partially compensating remaining operators for added risk. The gray market will reprice, not vanish. This is a basic economic law that any enforcement policy must face. Looking ahead, I want to say: in the empty stands, I can hear the game's whispers the clearest. When the cameras are off, when there is no audience, the hard decisions reveal themselves. Riot is betting that protecting the ranked ladder's integrity will retain legitimate players – and they are right on economic logic. But they are doing it with an unprecedented machine of power, with a transparency gap that has never been filled. Those who have witnessed esports' rise know that: the throne is not given, it is taken with the rebel's own shoes. And this time, the rebel might be the players themselves – when they start questioning TPM 2.0, hitchhiker liability, and whether a private company should hold final judgment over a community of 140 million people.