300,000 ranked accounts banned: The 0.2% division and the real story behind Vanguard

The first number that hit me wasn't 300,000. It was 0.2%.

There is a strange silence between those two numbers. 300,000 League of Legends and VALORANT accounts banned by Riot Games for ranked cheating — a number designed to shock. But when placed next to 140 million monthly active players — 120 million from LoL, 20 million from VALORANT — the shock begins to shrink. 0.2%. One five-hundredth. In any scouting system, 0.2% is noise, not signal.

I've seen this kind of noise before. When I was a young LoL pro in Guangzhou, before my left wrist forced early retirement at 15, I was on a roster that coaches believed was ranked far above its real skill level. Not because we cheated — but because someone on the team quietly rented a "dirty" account. Discipline culture for young players had no concept of "hitchhiker" back then. Now, Riot just wrote that word into law.

Vision score never lies, but it also doesn't know how to tell a story. Neither does that 300,000 figure — it isn't lying, but it's being used to tell a story whose narrator forgot the most important part: why are we applauding right now?

In September 2026, Riot Games did what it had long promised: bringing Vanguard — the kernel-level anti-cheat that sparked controversy for its intrusiveness in VALORANT — directly into the League of Legends client. Not as a patch. Not as a meta change. It was a system-level transformation: every LoL player now has to run software that touches the very kernel of their operating system. By February 2026, Riot published the number: nearly 300,000 accounts actioned for "ranked cheating" — including boosting, where a high-skill player logs into someone else's account to climb ranks for them — and its collateral extension, what they call "hitchhiking."

I remember 2026, during a post-game interview at LPL Summer after EDG beat RNG. Coach Clearlove looked at me — a 16-year-old journalist nicknamed "the girl in the dragon pit" — and asked: "Little sister, do you even know what jungle is?" I held up my tablet: EDG had 62.4% jungle control in the first 15 minutes, but RNG's vision score in the river was 1.7 times higher, which is why both first kills came from bush ambushes. Game 3 was won by lane-swap pressure. He nodded, said nothing.

I tell this story because it taught me: in esports, data often tells a different story than the surface. And this 300,000-account story — on the surface, a punishment; beneath the data, a restructuring of power.

The boosting economy: what never truly disappears

Let's talk about boosting as a market, because Riot — even without saying it — knows they're fighting a market, not a crime ring. Demand: players who want higher ranks for season rewards, for social media, to escape the "elo hell" of low ranks. Supply: highly skilled players, often very young, without team contracts, without salaries, earning a few hundred thousand to a few million dong per job to climb for someone else. For tier-2 and tier-3 players — those whose skill reaches near-professional levels but who have no team — boosting was once a significant underground income. In 2026, I followed an amateur tournament in southern Vietnam where a kid named Pun, playing Pyke, held a 12-game winning streak with a 87% kill participation rate. My article "Saigon Stray Cat" was shared over 4,200 times, but many in the scene wondered: who boosted him to the top? 87% KP is data too perfect — and in this industry, data too perfect is often a signal of something not clean.

Riot cannot erase that economic incentive. They can only raise the cost. When Vanguard blocks cheat software, manual boosting — a real person logging into another's account — became the main method; now Riot tightens further. But if demand stays flat — players still want high ranks — and supply is squeezed, the price of boosting rises. A boost becomes more expensive, and operators migrate to games with weaker enforcement. This is displacement, not a cure. What the original article didn't say: 300,000 is not a measure of effectiveness. It's a measure of enforcement intensity.

Hitchhiker: the most controversial piece

The most controversial — and most overlooked — element sits in a small definition: "hitchhiker." Riot describes it as a player who uses their own account, queues by themselves — but plays alongside an account being boosted. Riot claims the right to strip LP from these players, even though they broke no software rule. You don't need to hack. You don't need to pay for a boost. You don't need to do anything wrong. Just queue with a friend — unaware that the friend's account is being played by a hired booster — and you can still be penalized.

In traditional sports, the closest analogy is liability-by-association in doping: a relay runner who never knew their teammate used a banned substance can still be stripped of a medal. But international doping bodies have a sports tribunal, lawyers, an appeals process. Riot — a private company — holds the role of lawmaker, police, prosecutor, and jury in the same system. They refuse to disclose false-positive rates. They don't describe an appeal process. And they are simultaneously the beneficiary of a clean-media narrative. "From the mud of injury, I learned to read the game with the heart of a survivor" — I know too well what it feels like to be judged by a system that gives you no voice.

Smurfing: a soft line drawn by intent

Amid the celebration, one important line gets skipped: Riot states smurfing is not automatically considered cheating, listing 8 legitimate use cases — from practicing champions, playing with lower-ranked friends, to "protecting one's highest achievement on the main account." This runs directly against the expectation of a large portion of the community that views smurfs as the source of all ranked suffering.

Riot refuses a simple boundary based on account count, choosing a soft boundary based on intent. That means enforcement will rely on behavioral analysis, on context, on whatever an algorithm — or a policy team — deems "legitimate." With such a system, the line between legal and violation will always be a gray zone. And in a gray zone, those with the least power — ordinary players without media connections, without the ability to parse policy details — are the most likely to be punished.

TPM 2.0: a two-tier citizenship model

The most consequential detail the original article under-emphasizes lies in the future: Riot plans to require MFA, TPM 2.0 — a hardware security standard enabling device attestation — and hardware authentication to bind accounts to machines. Alongside it: verification requirements that may differ by rank. The higher you climb, the deeper the inspection.

This creates what I call a "two-tier citizenship model" in gaming. Low-ranked players — the majority — simply log in as usual. But those approaching the professional spotlight must prove identity, bind to hardware, submit to potentially invasive checks. Sound familiar? That's the structure of the "whereabouts system" in elite sport — top athletes must declare their location daily for anti-doping. It's defensible. But it poses an unresolved ethical question: why should players higher up the ladder sacrifice more privacy, when they have done nothing wrong?

And TPM 2.0 has an unspoken side effect: it punishes players who use shared computers. Internet cafes — the lifeline of Vietnam's LoL community and many developing regions — would face near-insurmountable barriers under hardware-bound verification. I lived the dream of a young Guangzhou prospect; the machines in youth teams belonged to no one. If hardware authentication rolls out uniformly, it's kids like 15-year-old me who get left behind first.

A cleaner ladder, a better scouting signal — but there's a dark zone

There is a positive story few tell: if the ladder becomes cleaner, it becomes a more trustworthy scouting channel. For academies, youth teams, and tier-2 systems, high rank is the first filter. Boosting corrupts that filter. A boosted Challenger account not only steals a spot — it sends a false signal into recruiters' radars. When serious enforcement makes such accounts vanish, the value of every slot on the ladder rises. That benefit is hard to quantify, but it's real.

Yet there's a geographical blind spot: China. LoL and VALORANT in mainland China operate under Tencent's ecosystem with localized anti-cheat and account-verification infrastructure — a completely different lineage from global Vanguard. The original article doesn't clarify whether the 300,000 figure includes Chinese servers. If it doesn't, 0.2% has no global meaning — the 140 million player base is largely made up of Tencent-ecosystem residents, untouched by this ban wave. This is a classic sample error: taking one region's metric, dividing by a global denominator, then calling it an international achievement. Growing up between two esports cultures, I know that imbalance too well.

And finally: LP protection. Riot says games with a detected cheater or leaver will not deduct LP from honest players. It's a small but valuable PR win — direct pain relief for player experience, a kind of "honor compensation" in Riot's style. But don't forget: it comes in the same policy package as what I consider the real game-changer — transforming Vanguard from an anti-hack tool into a behavioral governance infrastructure. A company that controls patches, controls tournaments, controls the system, and now controls player hardware — that's a vertical stack of power rarely seen in esports history.

Contrarian check: what exactly are we celebrating?

The most uncomfortable point nobody in the original piece raises: we're celebrating a figure that may represent less than a quarter of accumulated enforcement — from September 2026 (Vanguard's LoL integration) to February 2026 (when the number was released). At this intensity over a full year, the number could exceed one million. But the reverse is also possible: 300,000 is all they caught. There's no baseline, no prior-period comparison, no trend line — so we cannot conclude the ladder is "cleaner." It's only cleaner in the story Riot wants to tell.

That story has a major blind spot: Vanguard is the most powerful anti-cheat ever seen, but it doesn't erase cheating. It pushes violations into the dark, where they regenerate in more sophisticated forms — and it grants the company a new ability: to monitor behavior, not just hack tools. There are stars that do not choose the spotlight; they just wait for the right rain — those who love a clean ladder are waiting for a charitable rain. But rain also feeds something underground.

There is a fine line between anti-cheating and controlling the player's body. Riot hasn't crossed it yet — but TPM 2.0, if deployed, is a step dangerously close to that line.

Open ending: when a chip on your motherboard becomes your identity card

300,000 accounts will fade as a news beat after one season. The 0.2% figure will fade faster. But TPM 2.0 — a chip on your motherboard — will not disappear. It will sit there, silently attesting your digital identity, waiting for Riot to press the button. Minute 88 is the line between a legend and a forgotten story — Ronaldo's flash redefined that match, just as hardware-verification policy will redefine the seasons ahead. The question for us — the viewers, the players, the young prospects dreaming from internet cafes — is not whether 300,000 accounts deserved to be banned, but: when does the safety of a ranked system become the excuse to tighten control over ourselves?