Riot Games locks nearly 300,000 League of Legends and VALORANT accounts: the 0.2% figure and the device-identity roadmap behind it

On the North American solo/duo ladder, some Diamond accounts read strangely when you scroll their match history. Twenty straight games with the same duo partner, a 78% win rate, and then, from the eleventh game onward, a complete change in playstyle — from a patient, position-holding player into a lane-swapping, millisecond-precise harasser. One account, two players. That is the fingerprint of boosting, the paid ranked-climbing service.

Riot Games has just declared war on that fingerprint with its largest campaign to date: nearly 300,000 League of Legends and VALORANT accounts locked. The number comes from the publisher itself, unaudited, and the first thing a data journalist must do is put it over a denominator.

Estimates cited by Riot put League of Legends at roughly 120 million monthly active players and VALORANT at about 20 million, for a combined total near 140 million. Three hundred thousand divided by one hundred forty million is 0.2%. A ratio so small that a reader who only saw the headline would assume the servers are spotless. Raw numbers are mud; to see the truth, you have to put your hands in.

The context must be stated before anything else: Vanguard, the kernel-level anti-cheat, was built for VALORANT and was integrated into League of Legends in September 2026. That means the nearly 300,000 figure is most likely a cumulative tally over a quarter or less, not a full year. Annualized, the enforcement rate would be substantially higher — and that is the number boosting operators should actually fear.

Inside the Orlando bubble, the data went quiet, but the silence echoed. In 2026, when stadiums stood empty and the background conditions distorted every possession statistic, I learned that a number only means something once you know the conditions that produced it. Here, the background condition has a name: September 2026. Without it, 300,000 is just a handsome headline.

What Riot is actually doing goes beyond fighting cheat software. It is expanding Vanguard's remit from cheat detection into ranked-system behavioral control. Three groups are in the crosshairs: boosters, boosted accounts, and a newly named category — hitchhikers, players using their own accounts who queue alongside an account being boosted.

The third group is the flashpoint. Riot has stated it may revoke ranked points (LP) from hitchhikers even when those players broke no software rule. This is liability by association — an expanded standard with no clear precedent, and one that could catch innocent players simply because they queued with a friend.

Conversely, smurfing — playing on a secondary account — is explicitly defined by Riot as not automatically cheating. The publisher enumerates eight legitimate use cases, including preserving your highest achievement on your main account. Riot's Phillip mirageofpenguins Koskinas says plainly that playing a second account is not a crime. The line Riot draws runs through intent and behavior, not account count. That is a soft line, and soft lines are the hardest to enforce consistently.

The most notable element gets the least headline space: the future verification roadmap. Riot announced plans for multi-factor authentication (MFA), TPM 2.0 — the hardware standard enabling device-level identity attestation — and verification requirements that differ by rank. The goal is to make one-time accounts much harder to create.

If this happens, it changes the nature of a game account. Accounts become bound to hardware, and every machine swap, every shared internet-cafe device, every buyer of second-hand hardware becomes a case that needs weighing. This is a far bigger shift than 300,000 locked accounts, but it sits in the future tense, and so it stays quiet.

The contrarian angle lives here: tightening does not make the boosting market disappear, it makes prices rise. Demand remains intact — rank prestige, seasonal rewards, player ego — and supply remains intact, because the bottom of the esports labor pyramid is paid far too little. Skilled players need income; rank-hungry players need a service. Restricting supply only pushes prices up and pushes the operation deeper underground.

Russia 2026 is where I staked my honor on the PPDA model and never regretted it — but the real lesson of that year was not trusting a model, it was understanding its limits. A good model predicts a trend; it does not predict the human price.

There is a transparency gap that should be named directly. Riot is simultaneously the rule-maker, the enforcer, the sole source of enforcement data, and the beneficiary. There is no independent arbitration layer in between. The disclosures say nothing about a false-positive rate, describe no appeals process, and offer no third-party audit of the 300,000 figure. For a campaign of this scale, missing transparency is a problem, not a footnote.

The signal to track next quarter is not the new ban count. It is three other things: the high-rank distribution after boosted accounts vanish from the ladder, boosting-service prices on the gray market, and the real rollout of TPM 2.0. If the top of the ladder becomes cleaner, scouting systems built on ranked performance become more trustworthy — an indirect but durable benefit for the entire esports ecosystem.

Data should highlight the story, not replace it. Three hundred thousand is a big number. But 0.2%, and a device-identity roadmap, are what will shape the next season.