Riot actions nearly 300,000 League of Legends and VALORANT accounts: Vanguard has moved beyond software-cheat detection

In the first three weeks of October 2026, I tracked the solo queue ladder on the Korean server as part of my professional routine. What drew my attention was not the ranking, but the disappearances. Several accounts that had sat inside the top 500 of League of Legends solo/duo suddenly stopped appearing. No server transfer notice, no farewell stream, no status update. They simply left the ladder.

Then Riot Games published its data, and the missing piece clicked into place. Nearly 300,000 accounts across League of Legends and VALORANT had been locked or actioned for ranked-system manipulation. The story ran across international outlets within a day. The way it was framed reminded me of something I wrote last year: once you price it, sport becomes nothing more than a verification exercise. For esports the same holds, you just swap the unit of currency for the unit of accounts.

A ratio attached to the announcement changes the picture entirely. The number of actioned accounts equals roughly 0.2% of combined monthly players across both titles. A modest ratio, set beside the impression of absolute scale, forces the reader to ask which part is the real story.

The gap between impression and reality is always where I look for signal. This time I did not stop at the headline. I read the policy annex, and realised Riot is doing more than locking a few hundred thousand accounts. It is changing the power structure of the ranked system.

Context: Vanguard crosses an old boundary

To understand why, recall one marker. In September 2026, Vanguard, Riot's kernel-level anti-cheat originally built for VALORANT, was formally integrated into the League of Legends client. This is software running at the operating-system kernel level, meaning it has deeper access than most ordinary applications. In exchange, its ability to detect software cheats far exceeds solutions running at the application layer.

Vanguard's expansion into League of Legends was not news to anyone tracking the Riot ecosystem. What fewer noticed is that its objective has shifted. From hunting software cheats alone, Vanguard is now used to control ranked-system manipulation: boosting, paid climbing, smurf accounts, and the so-called hitchhikers.

Boosting, as Riot defines it, is a high-skill player logging into someone else's account to climb on their behalf. The booster plays by hand, without software intervention. The problem is that they are sitting in the wrong account. For years this has been a grey zone, hard to police because it demands behavioural analysis rather than malware scanning.

A more important backdrop is the role of the ladder itself. It holds a position larger than an amateur playground. It is the de facto selection system for the entire pipeline from amateur to professional. Academies, tier-2 teams and scouts all use rank as a filter. When boosting muddies that signal, the damage does not stop at ordinary player experience. It touches the industry's ability to identify talent.

Based on my experience following matches and ladders on the Korean server, one thing is clear: a scouting signal drawn from rank is only credible when it reflects the person behind the account. Boosting breaks that foundational assumption.

Analysis: Four changes actually sitting behind the disclosure

Riot announced four groups of measures. Each carries different weight, and the most contested one gets the least attention.

The first group is LP protection. When the system detects a game containing a cheater or a leaver, affected players do not lose LP. This is a low-cost change with high perceived value. It alters the expectations of ranked climbers: the risk of a bad teammate falls, the variance of a streak compresses, and over long samples LP becomes a marginally more accurate skill signal. It is one of the rare wins that even the harshest players struggle to oppose.

The second group concerns alt accounts, but in an unexpected way. Riot states that smurfing is not automatically treated as cheating. It lists eight legitimate use cases for secondary accounts, including protecting the highest achievement on a main account. Phillip mirageofpenguins Koskinas, a Riot Games staff member, is the voice behind this position. That means Riot's boundary is drawn on intent and behaviour, not on account count. A soft line, deliberately soft, and therefore very hard to enforce consistently.

For someone working in media-rights commentary as I do, this detail matters more than the ban wave itself. It shows Riot trying to distinguish motive rather than simply counting accounts. But distinguishing motive across hundreds of millions of players is an operational problem that can never be perfect.

The third group is the most contested: liability-by-association for hitchhikers. Riot uses the term to describe players who use their own valid account but queue alongside an account being boosted. These players may have LP earned in affected games revoked. They broke no software rule. They did not log into the wrong account. Yet they lose points.

This is where I paused longest. Riot is extending liability to a third party based purely on who they queued with. In governance terms, this expands the standard of responsibility along relationships rather than individual conduct. It is effective at closing the loophole, since boosters often climb in pairs to move faster. But it also opens false-positive exposure for players who accidentally queue with a friend being carried.

The fourth group is the future verification plan. Riot plans multi-factor authentication, TPM 2.0, and hardware authentication. TPM 2.0 is a hardware security standard enabling device-level identity attestation. If deployed, accounts would bind to physical hardware. Alongside it, verification requirements may be applied differently depending on player rank. The stated goal is explicit: making one-time accounts harder to create.

These four groups do not carry equal weight. The first two are day-to-day operations. The last two are structural change, and they will outlast the current ban wave by a wide margin.

Why Riot is doing this: a retention problem, not a revenue problem

From a business angle, the story is not revenue. It is player retention.

In a free-to-play model, players who get cheated against leave. Leaving means losing the monetisation base. Riot's stated rationale — improving player experience and limiting negative effects — matches a churn-prevention investment thesis. The engineering cost of Vanguard, multi-factor authentication and TPM 2.0 is capital poured into platform integrity. The return does not come from selling more items, but from keeping players around longer.

A second commercial side effect gets little mention: hardware attestation raises the cost of creating accounts. That narrows the account resale market, a grey economy that contributes nothing to Riot while sitting on top of its intellectual property.

But there is a downside the original reporting does not raise. If accounts bind to hardware, players using shared computers at internet cafes — a substantial share of the League of Legends population in some regions — are structurally disadvantaged. That is a business and PR risk, not merely a technical one.

And there is a familiar paradox in any supply-side crackdown. When the supply of cheap boosted accounts is squeezed, the price of boosting rises. Per-transaction revenue for the remaining providers may rise. The grey market does not vanish. It reprices.

I have seen this in other markets. The market always fears mispricing; I hunt for it. When compliance costs rise in one channel, money flows to a cheaper one. In esports, that channel may be another title with looser verification.

Contrarian angle: the headline is right, the story is wrong

Most readers will remember the figure near 300,000. That is a natural reflex to a large absolute number. But if you ask me which change matters most in this entire announcement, I will point at two words: TPM 2.0.

Account locking is reversible. Players create a new account and come back. Hardware identity is different. It permanently changes the cost of starting over. In an ecosystem where many players own several accounts, binding identity to a device is a deeper structural change than any ban wave. Vanguard entered the client in September 2026, but its remit is only beginning to widen.

The second paradox sits in liability-by-association. Riot is asserting the right to revoke points from players who broke no software rule. This is responsibility extended along relationships. It is effective in enforcement terms, but it raises a process question. The published material states no false-positive rate, describes no appeal mechanism, and involves no independent auditor. Riot is the rule-maker, the enforcer, the sole data source for enforcement figures, and the commercial beneficiary of enforcement. There is no independent arbitration layer in between.

This does not mean Riot's action is wrong. It means the scale of the action, nearly 300,000 accounts, is far larger than the transparency accompanying it.

A third paradox: the smurfing policy was announced in the opposite direction from community expectation. A large share of players want blanket bans on alt accounts. Riot instead lists eight legitimate cases. The gap between community expectation and actual policy will be the hottest argument over the coming weeks.

Transmission: the talent pipeline and a two-tier model

Zooming out, this is the step where Riot turns anti-cheat into cross-title infrastructure. Vanguard moves from a single-title tool to a platform governance layer. That raises the industry baseline and pressures other publishers to match.

The least noticed transmission channel is the amateur pipeline. If ranked integrity improves, scouting signals drawn from rank become more trustworthy. That is good news for academies and tier-2 development. Conversely, if enforcement intensity differs across servers, talent identification quality diverges by region.

Rank-differentiated verification creates a two-tier model of player citizenship. In governance terms this is defensible, since stakes are higher at higher ranks. But it also raises an equal-treatment question, and this is precisely the kind of discretionary rulemaking the original reporting does not examine.

One hidden variable I have not seen anyone raise: operating-model divergence. League of Legends and VALORANT in mainland China run inside the Tencent ecosystem, with localised account-verification and anti-cheat infrastructure distinct from the global Vanguard rollout. Whether the figure near 300,000 includes, excludes, or can be separated from the China server population is unresolved in the available material. If the enforcement figure is global-ex-China, then the effective coverage rate against a 140 million player denominator is overstated, since a large share of League of Legends monthly actives sit inside the China ecosystem.

And to be clear: the two figures of 120 million for League of Legends and 20 million for VALORANT are not attributed to any specific source in the material. That is a provenance weakness, and it directly affects the 0.2% ratio so many people are citing.

Another transmission channel worth noting is live-streamed content. Channels built on boosted or smurf accounts will face more friction. Conversely, authentic high-elo climb content gains a competitive edge. The effect is small but measurable over the medium term.

Takeaway: what matters is not the account count

I am writing this in mid-October 2026, roughly a month after Vanguard began operating inside League of Legends. That window gives me a different read on the figure near 300,000. If this is a cumulative enforcement tally over a quarter or less, the annualised run rate would be far higher. If it is a one-off disclosure, its reference value is far more limited than it appears.

The real asset is not in the number of locked accounts. It is in the ability to see yourself in next season: whether the ladder is more trustworthy, whether players stay, whether the scouting signal is cleaner. Those are questions only the next few quarters of data can answer.

So I will track four signals. The cadence of enforcement disclosures, to see whether Riot turns this into periodic reporting or a one-off. The actual rollout of TPM 2.0 and hardware attestation. The false-positive figures and the appeal mechanism. And boosting prices on the grey market, to test the thesis that the market reprices rather than disappears.

If you ask me what will reshape your ranked experience over the next eighteen months, I will not point at this ban wave. I will point at the computer you are using.