Riot Locks Nearly 300,000 Ranked Accounts: The Real Purge Starts With Your Hardware

That night, he won.

A Gold-rank player queued with his best friend, unaware the friend's account had just been flagged — it had recently been boosted up a rank by someone else. The match ran normally. A few kills, one clean outplay, LP flowing steadily into his own account. He went to sleep pleased with the win streak.

Weeks later, that LP was clawed back. Not because he used cheating software. Not because he shared his account. But because of who sat beside him in that match.

This week, Riot Games announced it had locked nearly 300,000 League of Legends and VALORANT accounts for ranked cheating. The press called it a purge. The community cheered. And almost the whole story revolved around a single number.

But I don't write about the accounts that were locked. I write about what the coverage deliberately left out.

That's why I spent the past few days re-reading everything Riot published, cross-checking it against what I observe on the ranked servers I track for my podcast. And what I found doesn't sit inside the number 300,000.

Three hundred thousand and a denominator nobody verified

To understand what's happening, we need a date. In September 2026, Riot Games integrated Vanguard — a kernel-level anti-cheat originally built for VALORANT — into League of Legends. It was the first time a Riot MOBA accepted software running at the deepest layer of a player's machine.

Since then, by Riot's own account, nearly 300,000 accounts have been actioned. Most involve two behaviors: boosting — when a highly skilled player logs into someone else's account to climb — and smurfing — playing on a secondary account below one's true skill.

Riot also offered a denominator: about 140 million monthly players across the two titles, roughly 120 million for League of Legends and 20 million for VALORANT. That puts the actioned share at about 0.2%.

First problem: neither the 140 million nor the 300,000 has an independent source. The player figure is an unsourced estimate. The account figure comes from the enforcing party itself. And the time window — September 2026 to now — isn't specified in the original report.

From my experience tracking ranked servers, I know one thing: when a single party writes the rules, enforces them, supplies the data, and profits commercially, every number must be read as a directional statement, not an audit.

Here's another thing the original report doesn't say: if the 300,000 is a cumulative total over roughly one quarter since the September Vanguard integration, then the annualized enforcement rate would be far higher. If instead it's everything Riot achieved in nearly a year, the real effectiveness is lower than it looks. Without a time window, 300,000 is just a shadow — big or small depending on who holds the light.

And there's another variable: does that 140 million include mainland China? League of Legends and VALORANT in China run under Tencent's ecosystem, with separate anti-cheat and account-verification infrastructure. If the 300,000 is global ex-China, the 0.2% ratio is badly miscalculated. It's a denominator hole nobody in the original coverage bothered to question.

What really changes isn't the punishment — it's identity

Skim it, and you'd think this story is about cheating. It isn't. Cheating is only the surface. Beneath it — and far more concerning — is how Riot is redefining what a game account is, and who owns it.

Riot's roadmap points to three changes. First, mandatory multi-factor authentication for ranked accounts. Second, TPM 2.0 — a hardware security standard — enabling device-level identity attestation, meaning an account can be bound to a specific physical machine. Third, verification requirements that may differ by rank: the higher the rank, the stricter the check.

Read individually, all three are reasonable. Combined, they form a two-tier governance system: low-rank and high-rank players no longer treated equally under one rulebook. It mirrors how traditional sports apply whereabouts rules more heavily to elite athletes — defensible in principle, but raising an equality question the original report never touches.

If that were all, this story wouldn't be worth two thousand words. What stopped me is a new concept buried inside Riot's statement: the hitchhiker doctrine.

Riot defines a hitchhiker as a player using their own account, breaking no software rule, but queuing alongside an account being boosted. The penalty: LP earned in those matches may be revoked.

Read that again. A player who plays by the rules, on their own valid account, can lose points because of who they queued with. It's a standard of liability by association — and in my view the most contestable part, legally and ethically, of Riot's entire announcement.

Meanwhile, one under-reported positive deserves credit: Riot added LP-loss protection when a match is found to contain a detected cheater or a leaver. It's a small technical change but a bigger improvement to daily player experience than the 300,000 figure, because it touches the everyday sense of fairness. Sadly, it's drowned out by the spotlight on the bans.

Alongside that, Riot makes clear that smurfing is not automatically cheating and lists eight legitimate secondary-account uses — including protecting one's highest achievement on a main account, or practicing a new role. Riot's enforcement boundary is intent- and behavior-based, not account-count-based. It's a deliberately soft line — and an extraordinarily hard one to enforce consistently.

You see the contradiction? Riot says we don't punish secondary accounts, then we may punish your main account if you re-offend, then we may revoke the LP of players queued with a cheater. Together, those statements form a rulebook even the enforcer admits is complex. And when rules are complex, the ones who lose are ordinary players, not professionals with lawyers.

When clearing the field becomes building a wall

Now comes the part where I interrogate myself. I've taken enough criticism in my career to know a hot take with no room for doubt is just noise.

Was Riot right that the ranked ladder needed cleaning? Yes. I've watched enough matches where an account boosted to Master then returned to wreck genuine players' games. I've seen leaderboards where rank no longer reflects skill but how much someone paid. On that front, Riot is moving in the right direction, and I won't pretend otherwise just to look contrarian.

Was the hitchhiker doctrine necessary? Possibly. Without it, boosters would just drag along a clean account as cover. But the cost is innocent players swept up — and a system that won't acknowledge false-positive risk is an immature system.

And here's my deepest doubt: is Riot's real target cheating, or monopoly control over player identity?

When accounts bind to hardware, when every login passes multiple verification layers, when rank determines the level of scrutiny, Riot isn't just clearing the field. It's building a wall around it. And on that wall, they are the gatekeeper, the record-keeper, and the lawmaker — all at once.

What's striking is that esports has no independent arbitration tier comparable to the Court of Arbitration for Sport in football. No body stands outside Riot to judge when Riot errs. The publisher is its own referee. That power structure worries me more than a million cheating accounts.

I could be wrong. Maybe in three years hardware attestation makes new-account creation so expensive the boosting market collapses. Maybe hitchhiker false positives are rare enough to ignore. But if I'm right, we're watching the moment a game becomes an identity-governance platform — and calling it protecting the player experience.

The market will reprice, not disappear

There's an old rule in black-market economics I learned making a podcast series about lower-tier players: when you choke supply, you don't eliminate demand. You just make it more expensive.

Boosting exists for two reasons: players want a pretty rank, and highly skilled players at the bottom of the competitive pyramid need income. Riot can lock 300,000 accounts, bind accounts to hardware, require two-factor authentication. But as long as demand for a prestigious rank and supply of cheap skill remain, the boosting market will reprice rather than collapse.

This is also why the ranked ladder matters more than it appears. For most players it's just a number. For academies, tier-two teams, and scouts hunting young talent, the ladder is the selection system. When an account is boosted, it doesn't just deceive opponents — it injects a false signal into the entire talent-development pipeline. That's why I support the cleanup, even as I question how it's done.

If you want to test this, watch boosting-service prices over the next six months. If they spike while demand holds, you'll know Riot won a battle but not the war.

I said something similar years ago, when the community was still cheering a hundred-million-euro transfer for a player who hadn't played fifty top-flight matches: transfers aren't where money moves, they're where fans' trust gets misplaced. Boosting is the same. It isn't where skill is sold; it's where rank is faked.

And while the world counts the accounts that were locked, I'm counting the rule-abiding players who could be swept up. Those two numbers aren't the same. One is published by Riot. The other, nobody publishes at all.

In esports, no hot take is too early — only coverage published too late. Riot just cleared the ranked field. But the real question isn't how clean the field is. It's who's holding the broom — and whether the person sweeping ever wonders if they swept away someone standing in the right place.