Riot locks nearly 300,000 League of Legends and VALORANT accounts: the hitchhiker rule matters more than the number

Vanguard entered the League of Legends client in September 2026, after years of serving VALORANT alone. Less than one ranked cycle later, Riot Games announced it had actioned nearly 300,000 accounts across both titles for ranked manipulation — boosting, elo-pushing, and a group it named separately: hitchhikers. These players use their own accounts and play with their own hands, but queue alongside an account being boosted. They can still lose League Points. Divide 300,000 by an estimated 140 million monthly active players across both titles and the result is 0.2%. A ratio that small is, by itself, a different story from the headline.

I have watched ladders and esports arenas in South Korea long enough to know that the most interesting part of an enforcement notice usually sits in the appendix, not in the big number. This notice has three layers. The first is scale: nearly 300,000 accounts locked. The second is compensation: players do not lose ranked points in games where a detected cheater or leaver was present. The third, the one I read closely, is the identity-verification roadmap — multi-factor authentication, TPM 2.0, hardware attestation, and rank-tiered requirements.

The technical context matters, so nobody misreads what this actually is. Vanguard is anti-cheat software operating at the kernel level of the operating system. Extending it from VALORANT into League of Legends is not a balance patch; it is a structural change at the client layer. By Riot's own description, Vanguard's remit is shifting from hunting cheat software toward controlling behaviour that manipulates the ranked system. Boosting has long been an economic relationship with supply and demand: a highly skilled player logs into someone else's account to lift its rank, paid in money.

The most consequential element is the definition of a hitchhiker. Riot is extending liability to a third party: a player who touches no software and breaks no technical rule can still lose ranked points for queueing alongside a flagged account. That is a far bigger change than 300,000 locks, and it arrives with a gap any newsroom should press on: no false-positive rate, no described appeals process, no independent auditor confirming the figure.

Parallel to that is how Riot handles smurfing, the most widely misread part. Riot states plainly that playing a secondary account is not automatically cheating, and enumerates legitimate use cases, including protecting the highest achievement on a main account. The enforcement boundary rests on intent and behaviour, not on account count. A line that soft is very hard to apply consistently. Riot also warns that repeat boosters may lose both secondary and main accounts.

The 140 million figure deserves careful treatment: it is an estimate with no named source. A large share of League of Legends' active players sit inside Tencent's mainland China ecosystem, which uses localized anti-cheat and account-verification infrastructure. If the 300,000 excludes Chinese servers, the denominator behind the 0.2% is inflated. If it includes them, the denominator is incomplete. Either way, the notice's own arithmetic is left hanging.

Data never lies, but it keeps the questions nobody asked. The question nobody asked here is this: if the boosting market does not disappear, where does it go?

Most commentary reads 300,000 locks as the end of the problem. I read it differently. Supply-side enforcement does not erase demand. Players still want a pretty rank, still want seasonal rewards, still want standing. Skilled players at the bottom of the esports pyramid still need income. When the risk premium rises, boosting prices rise with it rather than vanishing. And if Vanguard becomes too tight in these two titles, grey money tends to flow toward titles with looser enforcement. The industry-level problem gets displaced, not solved.

There is one more layer the notice does not mention: rank-tiered verification creates two tiers of citizenship inside a single ladder. Logically it is defensible — the higher the rank, the higher the stakes. But if hardware attestation is applied, players on internet-café machines or shared devices face systematic disadvantage. That is a fairness and privacy question the publisher has not answered publicly.

Structurally, one thing deserves noting: Riot is simultaneously the rule-maker, the enforcement body, the sole data source for enforcement statistics, and the commercial beneficiary of enforcement. There is no independent arbitration layer in between. I do not predict the shock. I only read the map the rest chose to leave out.

I also have to remind myself of what the model cannot say. There was a time I had to rebuild an entire analytical frame because old data collapsed in front of an outside variable. An empty stand does not make the data cleaner — it makes it truer. A figure self-published by the enforcing party works the same way: it is not wrong, but it only tells the part of the story that suits the teller. At nearly 300,000 accounts, the scale is large enough to demand matching transparency, and that level is not yet there.

What interests me most is not the lock count. It is whether Riot publishes on a cadence. If this number becomes a regular report, with trend lines and breakdowns by title and region, esports gains a new transparency standard. If it is one announcement and then silence, it is a communications campaign.

The signals worth tracking are fairly clear. First, the high-elo rank distribution once enforcement concludes — if locked accounts vanish from the ladder, the distribution should skew for a few weeks. Second, boosting service prices, the most sensitive indicator of whether the market was blocked or merely repriced. Third, when hardware-attestation requirements actually reach the client.

The ladder is not only where players pass time. It is the informal selection system for the entire amateur-to-professional pipeline. Every account boosted with money is a scouting signal bent out of shape. If this enforcement makes that signal cleaner, its real value will sit with academies and tier-2 teams — places nobody puts in a headline.