Riot locks nearly 300,000 League of Legends and VALORANT accounts: the real overhaul lies behind the number

In September 2026, when Vanguard first launched with the League of Legends client on my computer in Seoul, I sat still watching the progress bar run. Not out of curiosity about the anti-cheat software — I had followed it since its early days in VALORANT. I sat still because of a different question: when that machine stepped into the ranked ladder, who would it hunt?

A few months later, the answer arrived in the form of an official notice: nearly 300,000 League of Legends and VALORANT accounts locked for ranked cheating. The news spread quickly across international forums, and within hours that headline had become a familiar story: a publisher striking down on cheaters. But reading the original text again, I realized what caught my attention wasn't the number. Every film has a breath, and here that breath posed me a much bigger question.

To understand why this event matters, one must look at the structure of the ranked system. The ladder isn't just where players unwind after work. It's the qualifying track for the entire ecosystem — where academies, tier-2 and tier-3 teams search for talent. A player reaching Challenger can receive a tryout invitation. A clean Diamond account can open a door into a youth roster. When the ladder is manipulated, scouting signals are distorted at the root, and the damage doesn't stop at ordinary players.

The problem lies here: that ladder can be bought. Boosting — a service in which a highly skilled player logs into another person's account to climb ranks for them — has existed for years and operates as a real market. In Korea, where I live and work, this service was once prosecuted criminally under the Game Industry Act, with penalties for both seller and buyer. But globally, it remains a vast gray zone, operating alongside the official system and surviving despite periodic sweeps.

September 2026 marked a turning point. Vanguard, the kernel-level anti-cheat software previously exclusive to VALORANT, was integrated into League of Legends. This was the first time an operating-system-level anti-cheat tool entered Riot's flagship MOBA. Since then, the publisher claims to have actioned nearly 300,000 accounts across both titles. At first listen, this is a large-scale campaign, even a purge.

But let's do a simple calculation that the notice itself provides. League of Legends is estimated to have around 120 million monthly active players, VALORANT around 20 million. Together roughly 140 million. Three hundred thousand divided by one hundred forty million is about 0.2%. The 300,000 figure sounds like a flood, but the actual ratio is a drop in an ocean of players. This doesn't mean the campaign is meaningless. It means we're reading the wrong story, letting an absolute number obscure what truly changed.

One more note: the 300,000 figure comes with no specific time marker. If it's a cumulative total since September 2026, this is the result of a quarter of activity, and the annualized enforcement rate would be significantly higher. If it's a single sweep, the meaning differs. The lack of comparative data makes it hard to judge the true severity of the problem.

What's genuinely notable lies in another detail: Riot is expanding the concept of "ranked cheating." Previously, cheating meant using third-party software — aimbot, wallhack, scripts. Now it includes ranked-system manipulation: boosting, intentional deranking, and other forms. Vanguard is being extended from hunting cheat software to controlling behavior within the ranked system.

The most contentious point is the "hitchhiker" doctrine. Riot claims the authority to revoke ranked points from players using their own accounts, playing legitimately, but queuing alongside an account being boosted. In other words, you can lose LP because your duo partner is a cheater, even if you did nothing wrong and installed no software.

This is an expansion of associated liability unprecedented in esports. In traditional sports, if one athlete dopes, the person running beside them doesn't lose their medal. Here, the logic runs in reverse. Riot is asserting the right to punish based on relationship, not solely on the punished person's behavior.

Alongside that is the handling of smurfing — playing on a secondary account at a rank below one's true skill. Riot is explicit: smurfing is not automatically cheating. They list eight legitimate smurf use cases, including protecting one's highest achievement on the main account. This is a soft line based on intent rather than account count. It shows Riot understands the player community is more complex than a simple "violation" label, but it also makes enforcement harder to apply consistently, since intent is harder to measure than behavior.

One technical point worth noting: when a cheater or a leaver is detected, affected players are protected from LP loss. This is a small change with large experiential significance. It reduces the variance of unlucky games, and over large samples, makes LP a slightly more accurate skill signal.

And this is the least-discussed part, but the heaviest. In future plans, Riot mentions multi-factor authentication, TPM 2.0, and hardware authentication. Translated into everyday language: your account will be bound to a physical device. Creating a one-time account and abandoning it will become far more expensive.

The real revolution isn't the 300,000 accounts locked today, but that game accounts are about to be bound to hardware in the future. This completely changes the economics of account creation, and through that, the structure of the entire gray market behind it.

But it also creates another problem. In Korea, a significant portion of League of Legends players play at internet cafés — shared computers, logging in with personal accounts on public devices. If accounts are bound to hardware, these players will be treated unfairly compared to those owning their own machines. Riot hasn't addressed this in the notice.

Moreover, verification requirements may be applied differently depending on rank. This is a two-tier player citizenship model: higher ranks face stricter checks. There's a justification — high ranks concentrate the most money, prestige, and pressure, and are where scouting signals matter most. But it also raises a fairness question no one has answered satisfactorily.

And the thing no one mentions: the complete absence of false-positive rate data, appeal mechanisms, or independent audits. Riot is simultaneously the rule-maker, the enforcer, the sole data source, and the commercial beneficiary of that very enforcement. In such a system, there's no independent arbitration layer to adjudicate when errors occur. At a scale of 300,000 accounts, the absence of a cross-check mechanism is a worrying gap.

Another paradox of supply-side enforcement: when the cost of boosting rises, service prices rise accordingly. Demand doesn't vanish — people still want high ranks, rewards, prestige. Supply doesn't vanish either — high-skill players at the lower tiers still need income. The typical outcome in gray markets is that prices rise rather than the market collapsing. Remaining operators collect more per transaction.

I entered the archive like an archaeologist; when I left, I was a storyteller.

The story here goes beyond cheaters getting caught. It's the story of how a game is redefining who is allowed to be a legitimate player. Only when I stop running do I hear the song of the stands — and that song is changing its rhythm. For a documentary filmmaker like me, that's the material worth recording, not the number in the headline.

If hardware authentication is truly implemented, it won't only block cheaters. It will touch legitimate players on shared computers, those in difficult circumstances, and those returning to the game after years away. The price for a cleaner playground may be higher than we think — and the question worth asking is whether the community is willing to pay it.