Riot Locks Nearly 300,000 League of Legends and VALORANT Accounts: The Silent Clean-Up

In September 2026, when Riot Games embedded Vanguard — the kernel-level anti-cheat system that had until then existed only inside VALORANT — into League of Legends, I wrote a short line in my notebook: this is not a champion balance patch, this is an infrastructure change. Nobody in the newsroom believed me. Four months later, when the figure of nearly 300,000 accounts locked across both titles was published, the entire desk turned around and asked me whether Vanguard could really do that.

I did not answer immediately. I went home, reopened my notes from September, cross-checked them against monthly player data, and asked a question no one in the room had asked: 300,000 is a big number — but big compared to what? Unverified information is noise; verified information is signal. This is the moment to separate noise from signal.

Normally, when a major game publisher announces a wave of account bans, it is a technical governance story — the anti-cheat team runs its algorithms, sends notifications, and cleans up. This time the story sits elsewhere. Riot is expanding Vanguard's remit from detecting cheating software to controlling ranked-ladder behaviour. This is a shift from fighting cheats to fighting people.

Three concepts that the community often conflates need to be distinguished. Boosting — a highly skilled player logging into someone else's account to climb the ladder on their behalf — is the direct target. Smurfing — playing on a secondary account at a lower rank than one's true skill — is not automatically classed as cheating; Riot itself made this clear through statements by Phillip "mirageofpenguins" Koskinas, and it enumerated eight legitimate smurf use cases, including protecting one's highest achievement on the main account. And third, a concept appearing on paper for the first time: the hitchhiker — a player using their own account but queueing alongside an account that is being boosted.

Across 17 years of tracking the transfer market, I learned one thing: to understand a deal, you have to understand the money behind it. To understand a clean-up, you have to understand the economic structure of what is being cleaned. Boosting is a grey market with supply and demand. On the supply side sit highly skilled players, often at the lower rungs of the esports income pyramid, where pay is low and opportunities are scarce. On the demand side sit players who want a high rank, seasonal rewards, or simply prestige on the ladder. No ban wave removes both supply and demand at once.

The ladder is not just about fun. It is the de facto selection system for the entire amateur-to-professional pipeline. Academies and tier-2 teams still use ranked as a first-pass filter. When boosting corrodes the integrity of the ladder, it corrodes the reliability of the scouting signal. This is the point the larger news stories skip.

The most consequential element in this wave is not the 300,000 figure. It is the hitchhiker doctrine. For the first time, Riot asserts the authority to revoke ranked points from players who used their own accounts, broke no software rule, and merely queued with an account that was being boosted. This is an expansion of liability by association — and the single most legally and ethically contestable element in the entire story.

I have written about deals where a rider clause determines the true value of a contract. The hitchhiker rule is a rider clause of that kind: it does not change the rules of play, but it changes the risk of every player sitting next to a friend with a problem. I look at the scoreboard, but I always check the compass. The compass here points in a worrying direction: hundreds of thousands of honest players may lose LP for games they could not control.

Alongside this, Riot announced LP-loss protection when a cheater or a leaver is detected in a match. This is the under-reported bright spot. In ranked-economy terms, it compresses variance: if you no longer lose LP to contaminated games, then over a large sample your rank reflects true skill slightly more accurately. Small in significance, large in perception.

The bigger picture sits in the forward-looking plan Riot disclosed. It is considering multi-factor authentication, the TPM 2.0 hardware security standard, and rank-differentiated verification — the higher the rank, the stricter the identity check. If implemented, accounts will be bound to physical hardware. The cost of creating a "one-time" account will spike. This is a bigger change than 300,000 bans, and it is the part the media is skipping.

In governance terms, this is a two-tier citizenship model. The upper tier — high ranks, where scouts and academy teams observe — faces strict vetting. The lower tier — ordinary players — faces less. There is logic to it: the stakes at high rank are greater. But it also opens an equal-treatment question no outlet has raised. And for players on shared computers or internet-café machines — a meaningful share in many regions — hardware attestation may create a structural disadvantage.

One more variable deserves mention: Vanguard is now multi-title infrastructure. It operates at the operating-system kernel level — highly effective but deeply intrusive, and this is precisely the root of past privacy debates. The pitch is the only place where every lie gets exposed — but the digital pitch has a camera installed inside the player's machine, and that is a price the 300,000-account wave has not yet paid.

Finally, Riot's own economics cannot be ignored. This is an investment in integrity infrastructure, not a revenue-generating line. The rationale behind it is retention economics: players who get cheated on churn, and churn directly erodes the monetisation base of a free-to-play model. Riot's own framing — improving player experience and limiting negative effects — fits a churn-prevention investment thesis.

Here I have to go against the current. The 300,000 figure sounds enormous. But divided by estimated monthly players — around 120 million for League of Legends and 20 million for VALORANT, roughly 140 million combined — the ratio lands near 0.2%. That is a small number. The source article itself concedes as much.

But there is a deeper issue worth raising. That 140-million denominator has no clear source. No independent audit confirms it. More importantly, it lumps global servers together with the China ecosystem — where League of Legends operates under Tencent's machinery with separate anti-cheat and account-verification infrastructure. If the 300,000 locked accounts exclude China servers, the 0.2% ratio is materially distorted, and the entire "massive wave" framing needs revisiting.

Second issue: Riot has not published any false-positive rate, appeals mechanism, or evidentiary standard. At a scale of 300,000 accounts, this opacity matters far more than the absolute figure. A system that makes the rules, enforces them, publishes its own statistics, and benefits commercially from enforcement — with no independent arbitration layer. This is an inherent structure of publisher-run esports, and no outlet is asking about it.

Third issue, and in my view the most important long term: the grey market will adapt, not disappear. When the supply of boosted accounts is squeezed, boosting prices rise. Players still want high ranks for rewards and prestige. Skilled players still need income because the lower rungs of the esports pyramid pay poorly. A ban wave raises the risk premium; it does not remove demand. If League of Legends and VALORANT become harder ground, the flow migrates to lower-barrier titles. The industry problem is displaced, not solved.

And one further point stands out: the source article contains no voice from the community, from professional players, or from critical experts. All quantitative data comes from a single interested source — the publisher itself. This suggests the report was shaped largely by a Riot briefing, with the author's pushback confined to a numeric caveat.

I do not sell rumours, I sell context. And the context here is clear: this is a competitive-integrity governance story, not a performance story. What matters over the next 12 months is not a second ban wave but three other things — whether Riot turns enforcement-data disclosure into a periodic practice; whether TPM 2.0 and hardware attestation genuinely roll out beyond test scope; and whether grey-market boosting prices spike.

If all three happen at once, we get a new industry-wide integrity standard. If only one happens, this is a large clean-up that changes no rules of play. If nothing changes after six months, the 300,000 figure will fade into the past like every other big number — and the ladder will again fill with accounts that do not belong to the person sitting at the screen.

The question I leave for the scouting people: if ranked points are no longer a trustworthy signal, what will you evaluate talent with? Scrims? Youth tournaments? The CEO's flight logs? I have used all three. And I know which one is the most reliable.