296,416 Accounts and One Legal Loophole: Riot Games Is Building Its Own Court for VALORANT and League of Legends

There is one detail in Riot Games' latest enforcement report that nearly every esports outlet overlooked when they copy-pasted the figure of 296,416 accounts actioned for rank manipulation. Not the number. Not the fact that both VALORANT and League of Legends were pooled into a single statistic. The overlooked detail sits in a subordinate clause of the Anti-Boost system description: players who frequently queue with a boosting account may also be actioned.

Read that sentence again. Slowly.

Riot Games, a private Chinese-American company operating the two largest esports ecosystems on the planet, is granting itself the power to penalize not only violating accounts, not only the booster's main account, but also accounts that merely happened to queue alongside. No independent court. No third-party appeals mechanism. No published pairing threshold. Just an automated system, an open clause, and a promise to expand.

This is not a story about Riot cleaning up the ranked ladder. This is a story about Riot building a private judicial system whose rulings no one can oversee.

I have followed Riot's enforcement disclosures from the era when they called it a "periodic cleanup campaign" to now, when it has become a permanent program with public figures. And what I have learned across 22 years of observing this industry is this: whenever a publisher publishes a big number, media reports the number, while analysts should read the footnote.

Context: A gray economy Riot never quantifies publicly

Before dissecting the Anti-Boost system, the market it tries to control needs reconstructing. Boosting is not the isolated misbehavior of a few unethical individuals. It is an underground industry with supply, demand, pricing, customer service, and in some regions, refund guarantees.

The basic structure is this. The buyer — typically a mid-rank player who wants to jump to a high bracket for a cosmetic rank badge, for access to high-rank communities, or to meet entry requirements for amateur tournaments — pays a service. The seller — typically a high-skill player at or near Challenger tier — logs into the buyer's account and plays on their behalf. The process spans days to weeks depending on the rank gap to be crossed.

A second branch exists in parallel: account trading. Players outright buy an account that already carries a high rank, rather than hiring someone to grind it. This branch has a clear economic advantage — one-time cost, no dependence on match progression, and resale value. A third branch, the most systemically toxic, is intentional deranking: the owner of a high-rank account deliberately loses matches to drop to a lower rank, either to make boosting for someone else easier or to face weaker opponents.

These three branches form a closed, self-feeding system. The deranker drops rank to free a slot. The booster occupies that slot. The buyer pays to climb. The traded account becomes a circulating commodity. And at the top layer, money flows not only from retail buyers — it also flows from professional boosting shops, operations running hundreds of accounts simultaneously like actual businesses.

The key point media misses: this market does not exist independently of Riot. It exists because Riot preserves an incentive structure that makes it profitable. Every ranked system awards material or reputational rewards to those who reach high rank. Every such reward creates an incentive to pay for attaining it. Unless Riot changes the reward structure itself, or raises the risk cost high enough to eliminate the industry's profit margin, this market will always regenerate after every sweep.

That is why the 296,416 figure must be read with constructive skepticism. Not because the number is small. But because a large number by itself says nothing about a trend.

The Anti-Boost machine: Four penalty tiers and one intent boundary

Riot's definition of violating behavior needs precise reconstruction, because the entire legitimacy of the system rests on that definition.

Four categories of behavior are actioned. First, direct boosting — a high-skill player logging into another's account to play on their behalf. Second, account buying, selling, or trading. Third, intentional deranking. Fourth, using alt accounts for unauthorized rank climbing — smurfing with manipulative intent.

On penalties, the system operates on a four-tier escalating ladder. Tier one: upon detection, all ranked points and rewards gained from cheating are cancelled, the account is returned to its exact pre-manipulation rank, plus a temporary suspension. Tier two: repeat offense, ban duration extends on an escalating curve. Tier three: account buying/selling or intentional deranking, facing possible permanent ban. Tier four: the booster's main account and players who frequently queue with them may also be actioned.

Tier four is the one that matters.

Before going there, one design strength deserves acknowledgement. The system clearly distinguishes self-created, self-operated alt accounts — which are normal, legitimate, even common in the community — from rank manipulation. Anti-Boost targets intent, not the existence of alt accounts. This is a narrow, deliberate standard, and in principle, correct.

But what is the price of an intent-based standard?

The price is the feasibility of transparent enforcement. A clear rule like an outright alt-account ban is easy to enforce and easy to explain. A rule targeting manipulative intent must prove that intent — and Riot is proving it through behavioral signals and telemetry data, not through direct evidence of account ownership.

This is where anyone who has followed the industry long enough must pause. When a system convicts based on behavioral modeling, the false-positive rate is never zero. The question is not whether false positives occur. The question is how many, and who is accountable when they do.

In Riot's public record, those two questions are unanswered.

Core axis: The asymmetry between booster adaptation speed and detection maturity

The conventional strategic analysis of this piece would stop at praising Riot for doing the right thing. I will not.

Look at the two-player structure between publisher and boosting market through simple game theory. Riot has a finite engineering budget. Every dollar spent on behavior detection is a dollar not spent on content, game balance, or tournament organization. On the other side, the boosting market has direct, continuous profit incentive. When one method is detected, methods change. Their switching cost is low. Riot's switching cost is high.

This is an arms race where the attacker always holds the speed advantage. The defender only has to lose once to lose everything.

Evidence for this sits in Riot's own messaging: they concede they are still improving match-level detection capability — based on "boosting signs" in a given match's behavioral pattern. Admitting the need for improvement implies current methods are insufficient. And if current methods are insufficient, the actual detection rate is lower than the actual violation rate — meaning every published figure is a floor, not a ceiling.

This carries a second, deeper implication. If match-level detection relies on behavioral sign patterns, it must confront a basic identification problem: a high-skill player going all-out in a low-rank match, in signal terms, looks little different from a genuinely strong player having a good game. Both produce statistics above that rank bracket's average. The difference lies in long-term patterns and account context — and precisely there, behavioral modeling becomes error-prone.

I have seen this happen before, in another title. A behavior-based anti-cheat system once mass-banned the accounts of strong players returning after long breaks, because its model read sudden changes in statistics as signs of account ownership change. There was not a single cheater among them. Only players punished for being better than their own past selves.

This is not speculation about Riot. This is a known error pattern with industry precedent, and Riot publishes no figures on false-positive rates, successful appeal rates, or appeal processing times. That silence, in a domain where data is entirely held by the publisher, is not a positive sign.

But what matters more than the technical false-positive issue is the accountability issue.

The contrarian angle: Riot just granted itself the power to convict the innocent, and no one can object

Back to tier four of the penalty ladder. The clause on players who frequently queue with a boosting account.

By design intent, this clause is sensible. If the goal is to dismantle an organized boosting system, you cannot target only the manipulated account. The organizer typically uses alt accounts, rotates constantly, and operates as a network. To break a network, you must act on the network.

But here is the problem. "Frequently queueing" is a quantitatively vague clause, and Riot publishes no pairing threshold. How many matches counts as frequent? Ten? Thirty? If a player randomly queues with a boosting account three times in a week because both are at the same rank and play the same hours, does that count as frequent queueing?

This ambiguity is not a minor flaw. It is the essence of the problem. A system built on an unpublished threshold means players cannot know whether they are compliant. That is the definition of a discretionary rule.

And this too. No independent appeals mechanism is described. The entire chain from detection to adjudication to enforcement rests with a single party: Riot. This party writes the rules, investigates, adjudicates, enforces, and reports the figures.

In any other governance system, such concentration of power is treated as a structural risk requiring counterweight. In esports, it is treated as normal. And that is precisely the problem.

I am not saying Riot is abusing that power. I am saying the structure permitting abuse exists, and no mechanism prevents it. Those are two entirely different propositions, and the difference between them matters. People often conflate the two to shut down debate: anyone pointing out a structural loophole gets accused of making a personal indictment. That is a logical error, and it paralyzes any discussion of reform.

What draws my attention most is the 296,416 figure. Let me state my position clearly: I need to monitor whether Riot publishes period-over-period comparison figures. If it does, I will be the first to admit I was wrong. But at present, Riot's messaging provides no such data.

Good news for Riot: both VALORANT and League of Legends are their assets, so they do not depend on third parties to release reports. Bad news: precisely for that reason, no third party verifies the numbers they publish. In corporate accounting, a company publishing earnings without independent audit gets discounted by the market. In esports, that norm does not exist.

So what is the right question? Not "Is Riot tightening?" but "Tightening relative to what?" A cumulative figure with no baseline cannot establish a trend. It proves only that 296,416 accounts were actioned over an imprecisely defined window.

That window — "from late last year to now" — is itself a methodological weakness. No absolute dates, no clear definition of the statistical window. For a figure carrying such media weight, temporal ambiguity is an omission, not a triviality.

The biggest blind spot: Boosting and esports betting are two ends of the same river

This is where most Anti-Boost analysis stops too soon.

People read 296,416 accounts as a story about ranked fairness. I read it as a story about competitive integrity in a context where esports betting is expanding faster than regulation is being written. And this, I argue, is the core axis most analysis misses.

Connect the dots. A thriving boosting market creates a supply of accounts with predictable ranks. Those accounts appeal not only to buyers wanting a nice rank badge. They appeal to anyone seeking to bet on asymmetric information. An account already boosted to high rank, or in the process of being boosted, can be used to generate match outcomes favorable to one betting side. Boosting and outcome manipulation are not two separate problems. They are two phases of the same flow.

This brings me to a position I have held for years and will keep defending: esports betting regulation lags behind traditional sports betting regulation, and that gap is being exploited systematically, not incidentally.

Why the lag? Three structural reasons. First, esports operate entirely in digital environments, where every action leaves a trace but can also be deleted or disguised far more easily than on a grass pitch. Second, the esports ecosystem has many layers — publisher, tournament organizer, team, player, streaming platform, betting exchange — and no regulator oversees the whole chain. Third, the esports betting market's growth rate far exceeds the maturation rate of the institutions monitoring it.

Riot handles boosting at the ranked ladder layer. But the big money is not on the ranked ladder. It is at the betting layer. And there, Anti-Boost is only an indirect measure, touching the visible portion of a system whose submerged portion lies beyond the publisher's reach.

This is why I consider pooling VALORANT and League of Legends into a single statistic a weak analytical choice, not merely a presentation detail. The two titles have different boosting incentive structures. Different rank-inflation pressures. Different regional boosting demand. Pooling them conceals exactly the differences that must be analyzed to understand the market. If Riot published per-title figures, we would have a map of market dynamics. When they pool, we get only an impressive number to cite.

An impressive number is good for a headline. An impressive number is useless for understanding a mechanism.

The ecosystem picture: Who gains, who loses, and on what timeline

Anti-Boost must be placed on the industry transmission map to see where it actually reaches.

At the top is Riot Games as publisher. Its interest here is trust maintenance: a manipulated ranked ladder erodes the daily active player base, and that base is the foundation of the entire talent-scouting funnel and revenue. Anti-Boost is an asset-maintenance investment, not a moral act. This matters because it explains motivation: Riot will keep investing as long as the asset is threatened, not as long as there are violators.

Midstream is the ranked ladder and the account market. The impact here is downward pressure on boosting service demand, by raising the expected risk cost for both buyer and seller. But to be clear: no data in Riot's messaging allows quantifying that reduction. We know risk cost rises. We do not know by how much, nor how demand elasticity responds.

Downstream is player experience, the amateur talent scouting pipeline, and gray-market flows adjacent to betting. This is where long-term impact truly lives, and where the least data exists. A clean ranked ladder improves the signal value of high-rank matches for amateur talent discovery. That matters to academies and teams recruiting from solo play. But Riot does not draw this connection, and I present it as inference, not fact.

One point requires candor: if Riot genuinely wanted to protect this layer, it would publish data allowing it to be measured. Publishing a cumulative figure does not do that.

On regulatory comparison, Riot's messaging indirectly positions its method as a model of publisher-operated, automated integrity enforcement. This is consistent with Riot's overall model — owning its competitive ecosystem end to end. But "consistent with the model" does not mean "optimal." It only means "consistent with what they always do."

And this is where I want to stake my reputation.

Where I could be wrong

Honesty about the limits of this argument is required.

The biggest weakness: I am criticizing at the structural level, which places me on a position that cannot be refuted by any single fact. The "structure has a loophole" argument can always withstand any evidence that the system works well in practice, because it is not an argument about current outcomes but about potential future abuse. That is its logical strength and its evidentiary weakness. I concede this.

So what conditions would make me confirm I was wrong?

First, if Riot published period-over-period data with absolute dates, and the figure rose steadily across periods, my "cannot establish trend" claim collapses. Second, if Riot published false-positive rates, successful appeal rates, and specific pairing thresholds, my "discretionary rule" claim is neutralized. Third, if an independent appeals mechanism emerged, even a hybrid one, my "concentration of power" claim weakens considerably.

I do not expect all three to materialize simultaneously. But if any one occurs, I will be the first to rewrite this assessment. That is the commitment I always keep with my readers: I do not write to be loved, I write to be right, even if right late.

One other possibility deserves consideration. Perhaps Riot withholds details not to conceal, but because publishing detection thresholds would hand violators an evasion guide. This is a legitimate argument, and I must grant it. Balancing transparency against detection efficacy is a real tradeoff, not a clear-cut choice. But that tradeoff can be resolved through confidentiality-bound independent audit — a model financial systems have used for decades. The existence of a feasible solution weakens the argument that the status quo is unavoidable.

What to watch

Four specific signals will reshape our understanding of this system, and I will track them as a market observer, not a fan.

Signal one: whether Riot publishes its next enforcement figures with a comparison baseline. If so, we can for the first time analyze a real trend rather than a standalone number. If not, every "tightening" claim remains interpretation.

Signal two: the emergence of a publicized false-positive case. Industry history shows such cases always arrive; it is only a matter of time. When it comes, Riot's response will test the legitimacy of the intent-based standard.

Signal three: clarification on teammate joint liability. If Riot publishes a specific pairing threshold, over-reach risk declines. If it stays silent, that risk remains intact.

Signal four: adaptation of the boosting market. If new violation methods appear in subsequent disclosures, that is evidence the arms race continues and the system has not reached steady state.

A forward-looking thought

Over the next three years, I expect the shape of this problem to change in a direction most current analysis has not seen. As the esports betting market keeps expanding and exchanges integrate ever deeper into the competitive ecosystem, the boundary between "an account manipulated to gain rank" and "an account manipulated to generate betting outcomes" will blur. At that point, boosting ceases to be a ranked-fairness issue. It becomes an ecosystem-integrity issue.

And when that happens, the current governance model — the publisher detecting, convicting, enforcing, and reporting itself — will face pressure it has never confronted. Not because Riot is doing wrong. But because no mechanism can monitor it alone in an environment where stakeholders have become too numerous for a single entity to manage.

The question I leave for my readers is not whether Riot is doing enough. That is an easy question and changes nothing. The right question is: if Riot wrongly convicts an account, and that person has no way to appeal before an independent third party, what distinguishes that system from any power system that has ever existed without checks and balances?