Nearly 300,000 League of Legends and VALORANT Accounts Locked in Ranked Crackdown: Vanguard Moves From Cheat-Hunting to Identity Governance

In late September 2026, a former Challenger player on the Korean server posted a forty-second clip to a community forum. He had reinstalled the League of Legends client after years away, and the welcome screen was no longer the familiar blue logo, but the word Vanguard booting alongside the system. Four days later, his alt account vanished from the ladder. No email notice, no appeal button, just a dash where a rank used to be.

That was the moment I realized I was watching one of the largest governance turning points in esports over the past five years. Nearly 300,000 accounts across League of Legends and VALORANT have been locked or stripped of ranked points, according to an official statement from Riot Games. The absolute number sounds overwhelming. But set against an estimated 140 million monthly active players across the two titles, the actual ratio lands at roughly 0.2%. Most readers will stop at the headline. I am interested in what sits behind that percentage sign.

System context and the September turning point

Vanguard is anti-cheat software operating at the kernel level, born alongside VALORANT and known for detecting hardware interference at depth. Integrating Vanguard into League of Legends from September 2026 marked the first time a kernel-level anti-cheat tool was embedded directly into the client of a fifteen-year-old MOBA. Based on my experience following ranked matches on the Korean and Southeast Asian servers, I see this as more than a technical upgrade. It is a declaration that the boundary between "legitimate player" and "cheater" will be redrawn by hardware, not by in-game behavior alone.

In the following quarter, Riot rolled out a series of accompanying measures. Players affected by a cheater or a leaver receive ranked protection, meaning no League Points are lost in matches that were compromised. This is a psychologically significant change, because most ranked players have experienced the helplessness of losing to a griefing teammate while still being docked points. In parallel, Riot announced plans to add multi-factor authentication, TPM 2.0 hardware standards, and device authentication. The stated goal: make "one-time" account creation substantially harder.

The hitchhiker clause and expanded liability

Among those announcements, the detail that stood out most to me was a term the press has barely mined. Riot calls the "hitchhiker" group those who use their own legitimate accounts, play legitimately, but queue alongside an account being boosted. Under the new policy, this group can lose ranked points despite breaking no software rule. This is a rare expansion of liability by association in esports governance, because it shifts the standard from "what you do" to "who you queue with."

At the same time, Riot defined smurfing very clearly. Playing a secondary account is not automatically treated as cheating. The publisher enumerated eight legitimate use cases, including protecting one's highest achievement on a main account, practicing new champions, or playing with friends at a lower level. Phillip Koskinas, the Riot Games representative handling the issue, stated that the line sits with intent and behavior, not account count. That sounds reasonable, but it is precisely the structural weakness: an intent-based standard is almost impossible to enforce consistently across hundreds of millions of players.

The gray market does not vanish, it reprices

I spent most of 2026 analyzing data from 387 K-League and LCK matches to measure the impact of losing home-field advantage. The lesson I drew then still applies here: when a variable is intervened upon, the market does not shrink, it redistributes. Boosting exists because of two fundamental forces. Demand comes from players who want a prestigious rank without the time to climb. Supply comes from high-skill players with low incomes at the bottom of the esports labor pyramid.

When Riot raises the risk cost for supply, boosting prices rise rather than disappear. The surviving boosting crews will earn more per contract, and part of the activity will migrate to titles with looser verification. This is something anyone who has tracked the gold and account markets in this industry recognizes. Hardware verification changes the cost structure, but does not solve the underlying economic driver.

The transparency problem the 300,000 figure obscures

Read only the headline, and one easily believes this is a comprehensive cleanup campaign. But one detail gave me pause. All quantitative data in the announcement comes from Riot Games itself, the party that makes the rules, enforces them, serves as the sole data source, and benefits commercially from players staying longer. No independent auditor confirms the 300,000 figure. No false-positive rate is disclosed. No description of an appeals process exists for those wrongly docked points.

For an action involving nearly three hundred thousand accounts, the absence of a counter-checking mechanism is a troubling gap. In professional football, when a player is suspended, there is always a disciplinary panel and a right of appeal. Here, the roles of judge, jury, and prosecutor sit within a single department. That structure can be effective, but it raises a question of long-term legitimacy as hardware verification deepens.

Add another layer of complexity: the plan to require different verification by rank. Higher-tier players face stricter identity checks. In governance terms this is defensible, since cheating risk concentrates at the top of the ladder. But it also creates a two-tier citizenship model within the player base, and raises an equal-treatment question the announcement does not thoroughly explain.

Meta is not for worship, but for swimming upstream

One under-discussed angle carries the strongest ripple: ladder integrity is the hidden infrastructure of the entire scouting system. Academies and tier-two teams have long used ranked standing as a screening filter. When ranks are diluted by boosted accounts, the scouting signal is also noised. If this crackdown is sustained, the quality of ladder-derived signals will improve within six to eighteen months. This is the biggest benefit the headline about three hundred thousand does not mention.

But if enforcement intensity varies across servers, scouting quality will diverge by region. A server with looser verification will attract players seeking clean accounts, the way gold-farming markets concentrate where oversight is weak. This is a form of global arbitrage the announcement does not address.

One more point worth tracking: extending Vanguard from VALORANT to League of Legends marks the first time Riot turns an anti-cheat tool into shared behavioral-governance infrastructure across titles. From here, anti-cheat software no longer only hunts cheats but can expand into controlling other behavioral categories in the competitive system. With a publisher simultaneously holding the patch, the tournaments, system-level access, and device identity, this concentration of power is unprecedented in the industry.

What lingers after the lights go out

Of all the announced changes, the most consequential is the least mentioned: the plan to bind account identity to hardware. This is the boundary that reshapes the entire account economy, not only for cheaters but for players returning after years, those using shared computers at internet cafés, and even professional players with practice accounts. The question I carry back after each look at the ladder is no longer "who is boosting," but: if each account is tied to one device, are we protecting the player community, or building a gate that only those with sufficient hardware can pass through?