Vanguard Crosses the Border: Nearly 300,000 Ranked Accounts Locked and the Price of a Clean Ladder

Past midnight, after the final match of a day spent climbing the ladder, the screen I had left open still bore the words “Ranked — Locked” on an account I had followed for many seasons. No whistle, no red card, only a cold notice that this account had been locked for interfering with the ranked system. That night I understood that the biggest battle of the season is not fought on Summoner’s Rift, but inside the very ladder that millions of us call home.

Riot Games has locked nearly 300,000 League of Legends and VALORANT accounts since Vanguard, the kernel-level anti-cheat originally deployed for VALORANT alone, was formally integrated into League of Legends in September 2026. I have sat in the press row long enough to know that a thunderclap never tells the whole story behind it.

The story I want to tell here revolves around a new definition of cleanliness. Riot is not stopping at hunting cheat software. It is expanding Vanguard’s remit from fighting cheat tools to policing manipulation of the ranked ladder: boosting, hitchhikers, and smurfing too. This is a shift at the system level, where the game client becomes an institution of behavioral governance rather than a mere tool of cheat detection. With roughly 120 million monthly League of Legends players and 20 million VALORANT players, nearly 300,000 locked accounts amount to about 0.2 percent of the player base. The source article itself states that ratio. A headline about a “cheating epidemic” would overwhelm the reader; the 0.2 percent figure tells a quieter story, and I believe a more honest one.

Here I must state plainly what I consider the core finding: the most frightening change in this enforcement package is not the locking of accounts, but the “hitchhiker” doctrine and the plan to bind account identity to computer hardware.

The hitchhiker doctrine allows Riot to revoke ranked points from players who used their own accounts and queued alongside an account being boosted. That player did not cheat in software terms, did not hack, yet may still lose points. This is an expanded standard of liability by association, and I regard it as the single most contestable element in the whole story, legally and ethically.

At the same time, Riot makes clear that smurfing is not automatically treated as cheating. It lists eight legitimate uses of secondary accounts, including protecting one’s highest achievement on a main account. Its enforcement boundary therefore rests on intent and behavior, not on account count. A soft line, and precisely because it is soft it will be hard to enforce consistently.

Then there is point insurance: if a match is found to contain a cheater or a leaver, honest players do not lose LP. This is a small but tangible win for player experience, and I personally believe it improves community sentiment more than the 300,000 figure itself.

The future section is where I have to stop. Riot plans to add multi-factor authentication, TPM 2.0, hardware-level identity attestation, and to apply different verification requirements depending on rank. When an account is tied to the physical components of a machine, the cost of creating a “one-time” account soars. That is the revolutionary change to the account economy, not the mass bans being counted.

At industry level, this is the first time a single anti-cheat system has been elevated into platform-level governance infrastructure, spanning two titles with ambitions to expand. Riot now holds patch control, tournament control, client-level system access, and now hardware-level identity. No publisher in esports history has held the entire vertical stack of power like this. And when one publisher sets the standard, the rest are forced to follow.

But I promised myself I would not over-romanticize every publisher communiqué. And this is where I am suspicious.

Nearly 300,000 accounts locked over a window that is not specified, after the September 2026 integration milestone. That may be a cumulative quarterly total, and if so the real enforcement run rate is even higher than presented. Yet there is no independent verification whatsoever: Riot is the rule-maker, the enforcement body, the data source, and the commercial beneficiary of that enforcement. In sports law, that is called a structural conflict. There is no independent arbitration layer here.

Nor is there a false-positive rate, a described appeals process, or an evidentiary standard for classifying someone as a hitchhiker. At a scale of 300,000 accounts, the silence around that question looms far larger than the published number.

Another layer the source article does not touch: enforcement does not abolish the boosting market, it only reprices it. Demand remains — prestigious rank, season-end rewards, player ego. Supply remains — skilled low-tier players who need income. When risk rises, service prices rise, and part of the activity may migrate to titles with looser enforcement. The problem is displaced, not solved.

And I wonder about the fairness of TPM 2.0: players on shared machines in internet cafés will be disadvantaged relative to those with their own computers. That is an accessibility risk the official communiqué has not addressed.

So why do I still follow this story with a reporter’s attentiveness?

Because the ranked ladder is the lifeblood of the entire esports ecosystem. It is the de facto selection system for every academy, every tier-2 team, every tryout. Boosting does not only ruin the amateur experience; it corrodes the very signal scouts rely on to find talent. I once carried a young player from Iron to the North American top 200 and watched a contract door open thanks only to a clean ladder. When that ladder is manipulated, what is harmed is the dream of kids playing in internet cafés until dawn.

People say this is only a game. I say this is where we entrust our youth, and people have the right to demand that the measuring stick be honest.

There are championships that do not sit on a trophy, but deep inside sleepless nights. If Riot truly wants those sleepless nights to mean something, it must prove that its scales tilt not only toward the referee, but also toward the accused. Who will audit the auditor?