Riot Games Locks Nearly 300,000 League of Legends and VALORANT Accounts: The Number Doesn't Tell the Whole Story

A number has just been dropped onto the global esports table, and it is big enough to make people pause: nearly 300,000 League of Legends and VALORANT accounts have been locked for cheating in ranked play. I read this announcement one evening in Seoul, with a metrics dashboard still running on the screen beside me. The first thing I did was not nod and share it, but ask: where was this number born, over what time window was it measured, and who is telling the story? Before you trust a number, ask where it was born. A decade in analysis taught me that an enormous absolute figure is always a perfect curtain for unanswered questions, and this time is no different. To understand what actually happened, we need to go back to the rollout milestone. Vanguard — Riot Games' kernel-level anti-cheat software, previously tied to VALORANT — was integrated into League of Legends in September 2026. This is not a champion balance patch, nor a meta change. It is a system-level change: how the game client behaves on a user's machine, how player behavior is observed, and how Riot defines a legitimate account. Riot announced that nearly 300,000 accounts were actioned across the two titles. The main violation group consists of boosted accounts — where a highly skilled player logs into someone else's account to raise its rank, a paid or arranged service relationship. There is also the hitchhiker group: players using entirely their own accounts but deliberately queuing alongside an account being boosted. Riot states these players may lose ranked points (LP) even though they violated no software rule themselves. On the other side, Riot spokesperson Phillip "mirageofpenguins" Koskinas stated that smurfing is not automatically treated as cheating, and listed eight legitimate use cases — including protecting one's highest achievement on a main account. Looking forward, they announced plans to strengthen verification via multi-factor authentication, TPM 2.0 hardware security, and rank-differentiated verification requirements. Now let us dissect the number. The article mentions estimates of roughly 120 million monthly League of Legends players and about 20 million VALORANT players, about 140 million combined. Dividing 300,000 by 140 million gives roughly 0.2%. This is a ratio the article's own author concedes is relatively small. But there are two notable methodological issues. First, the 120 million and 20 million figures are tied to no specific source — no independent measurement body stands behind them. Second, and more importantly, the nearly 300,000 locked accounts were announced after the September 2026 Vanguard integration milestone. That means this is very likely a cumulative figure over roughly one quarter or less, not an annual figure. Annualized, the enforcement run-rate would be substantially higher. A number framed as a single event may actually be one part of a long series. Based on my experience tracking matches and account enforcement waves, there is a subtlety here: when the publisher is simultaneously the rule-maker, the enforcement body, and the sole data source, the number is no longer neutral. Data does not shout, it whispers — and I have learned to lean in and listen. Here it whispers that no independent auditor has confirmed those 300,000 accounts actually violated anything, and that no false-positive rate has been published. What is more interesting is the violation taxonomy. Riot distinguishes three tiers: software cheaters, account boosters, and hitchhikers. The third group is the talking point. A player using their own account, playing by the rules, but knowingly or unknowingly queuing with a boosted account, can lose LP. This is an expansion of liability by association — a new standard in game governance, and the most procedurally contested element. On gray-market economics, I do not believe punishment alone can erase boosting services. Demand remains: players want prestigious rank, seasonal rewards, bragging rights. Supply remains: high-skill but low-income players at the bottom of the esports labor pyramid. When risk cost rises, the service price rises with it; the market does not vanish. I will not stop you from betting — I only want you to understand what you are betting on. And I will not stop you from believing in this anti-cheat victory — I only want you to understand what you are believing in. One point deserves emphasis regarding ranked impact: LP-loss protection when a cheater or leaver is detected is a genuinely valuable change. It reduces the penalty for unlucky games, compressing variance and making LP a marginally more accurate skill signal over large samples. This may bring players a more positive feeling than the 300,000 figure does. This is where I want to stand against the crowd. Most coverage centers on the 300,000 number as a PR win. In my view, that is only the tip. The submerged part — and the true game-changer — is the hardware-level verification plan. Think about it: TPM 2.0 is a security standard binding identity to physical hardware. When Riot applies it, an account is no longer a string of characters, but bound to a specific device. Their goal, in their own words, is to make creating one-time accounts harder. Sounds reasonable. But this is a far bigger change than locking 300,000 accounts, because it reshapes the entire account economy. It also raises privacy questions, and questions for players using shared machines at internet cafés — a large group across many Asian regions, Vietnam included. The night of Seoul 2026 taught me that truth can be lonely, but never wrong. I was once called a traitor simply for presenting xG figures from a historic win. Here, the lonely truth is: a hardware-based verification mechanism, combined with rank-differentiated requirements, is creating two tiers of citizenship in the game. Higher-ranked players face stricter control. In governance terms this is defensible — stakes at top rank are larger. But in fairness terms, it warrants debate. The biggest blind spot: if the 300,000 figure excludes China servers — where League of Legends runs in Tencent's ecosystem with separate anti-cheat infrastructure — then the 0.2% ratio above is computing the wrong denominator. A large share of League of Legends' monthly active players sits there. This is a data-provenance issue, not a sporting one. Riot is also setting a standard for the whole industry. Extending Vanguard from VALORANT to League of Legends turns a single-title tool into a platform-level governance layer. When one publisher holds patch control, tournament control, client-level system access, and hardware-identity attestation simultaneously, the space for independent oversight narrows. That is a structural observation, not an accusation. So what are the signals for the next cycle? I am tracking three things. One: whether Riot publishes enforcement data periodically with trend lines, or whether this is a one-off communications beat. Two: the actual rollout timing of TPM 2.0 across both titles — if it materializes, the cost of creating new accounts will spike and the privacy debate will ignite. Three: gray-market boosting prices, since that is the real indicator of whether the market is eliminated or merely repriced. We love esports for what data cannot reach — and we live by what it can. The 300,000 figure is the starting point of a question, not an answer. And when a publisher holds both the pen and the hammer, our continuing to ask where the number was born is the only way to keep this game trustworthy.