Four Penalty Tiers and 296,416 Accounts: Riot Games Redraws the Rank Manipulation Map

Riot Games has identified 296,416 accounts engaging in rank manipulation across VALORANT and League of Legends. The cumulative total was released alongside a four-tier penalty structure, but with no breakdown by region, by title, or by time period. To anyone who works with data, a total standing alone is a total you cannot draw conclusions from. What is usable sits elsewhere: in how Riot defines the violation, in the order of penalties, and in a joint-liability clause I read three times.

I have tracked VALORANT and League of Legends ranked matches since 2026, when I was still competing and organising tournaments. Back then, an unfamiliar account appearing in Diamond with a 78 percent win rate over its first twenty games was something everyone noticed and nobody measured. Today it is measurable — and because it is measurable, the problem is far more visible.

Context: boosting, deranking, and a narrow safe harbour

Riot Games operates Anti-Boost as an automated enforcement system targeting rank manipulation. Four behaviour groups fall inside its scope: boosting, meaning a high-skill player logging into someone else's account to climb on their behalf; buying, selling or transferring accounts; intentional deranking; and using secondary accounts to assist climbing.

One point must be stated before reaching penalties: Riot does not ban smurf accounts. Secondary accounts created and operated by the account holder themselves sit in the normal-activity category. The targeting standard is intent to manipulate rank, not the existence of multiple accounts. This is a narrow, deliberate safe harbour — it protects legitimate players while forcing the system to prove intent rather than simply count accounts on an IP address.

Four penalty tiers and the logic behind them

Tier one: on detection, ranked points and rewards earned through cheating are cancelled, the account is returned to its original rank, and a temporary suspension is applied.

Tier two: repeat offences produce progressively longer bans. The existence of that escalation ladder is itself a data point. If the recidivism rate were zero, nobody would design a ladder. Riot building one in advance indicates it has measured how often offenders return, and that the figure is larger than can be ignored.

Tier three: buying, selling or transferring accounts, or intentional deranking, can lead to a permanent ban. This is the heaviest tier, and it targets precisely the group with the clearest commercial motive — the sellers of the service rather than its buyers.

Tier four: joint liability. The booster's main account, and the players who frequently queue with them, may also be actioned.

The first three tiers follow the ordinary logic of punishment. Tier four is different in kind, and I will return to it.

A rollback-and-react mechanism, and the detection lag

Anti-Boost operates on a detect-then-roll-back model, not a preventive one. Points and rewards are cancelled only after the behaviour has been recognised. That means a lag always exists between the moment of manipulation and the moment of remediation. During that lag, the players matched alongside the boosted account have already lost real points, and those points are not returned to them.

For anyone working with data, the lag matters more than the penalty. A permanent ban announced six months later cannot restore a match already lost. It only shifts the expectations of future buyers of the service — and expectations are far harder to measure than the number of locked accounts.

Riot currently controls both detection and adjudication. No independent appeals body is described in the announcement. Governance authority sits entirely with the publisher, consistent with how Riot runs its ecosystem end to end, from matchmaking servers to professional circuits.

Pooling two titles into one figure: where I stop

296,416 is a pooled figure covering VALORANT and League of Legends, with no per-title split. These two titles have fundamentally different boosting economies. VALORANT is a tactical shooter where individual skill shows directly through aim and decision-making, so the value of a high-rank account is tied closely to personal competitive reputation. League of Legends is a MOBA where climbing depends on five-player coordination, so demand for paid boosting usually attaches to a desire to enter higher-ranked groups rather than to personal reputation.

Collapsing those two into a single total discards the most valuable information available: which title faces greater manipulation pressure, whether that pressure comes from demand or supply, and how it moves across seasons. A strong report answers all three. A pooled total answers none of them.

I do not trust intuition — I trust the decay coefficient of intuition. Here, the decay coefficient applies to the data itself: a total without a comparison baseline loses value faster than any other line in the table.

A counter-intuitive angle: the crackdown claim has no data behind it

The announcement circulated with a message that Riot is tightening control. But the only figure given is a cumulative total with no prior-period baseline. A total cannot establish a trend. That is an author's assertion, presented as though it were a data conclusion.

Numbers never lie — only the reader's heart turns them into lies. Reading a cumulative total as a rising curve is a familiar operation, and it is the wrong one.

The sharpest risk sits in tier four. The frequent-queueing clause carries no tolerance threshold, no minimum match count, no time window, and no appeal mechanism. A legitimate player queueing with friends a few evenings a week could enter the enforcement zone without knowing a teammate has been boosting. The false-positive probability here is not zero, and its cost falls on the very players who follow the rules.

An intent-based standard is also difficult to apply consistently. Rules with clear boundaries are easy to explain. Rules built on inferred intent depend on a detection model, and every model carries error. When that error lands on a heavily followed player, the story reverses very quickly — faster than the model updates.

One more detail: the enforcement data is self-reported by Riot, with no independent audit. That does not make it wrong, but it places it in the correct category: figures declared by one party. In my line of work, the two-source rule is not perfectionism — it is the minimum condition for entering a fact into the table.

There is also a structural asymmetry: detection always trails adaptation. Boosters change methods faster than detection models mature. The announcement itself concedes that improving match-level detection is still in progress, which means current methods are not yet complete.

Signals for the next cycle

I do not value a policy announcement by how reassured it makes me feel. I value it by what can be measured at the next disclosure.

First, the baseline. When Riot publishes the next total, only then does a trend line exist. If the cumulative figure rises while quarterly actions fall, the system is saturating rather than tightening.

Second, the joint-liability threshold. If Riot adds a specific number to the frequent-queueing clause — match counts, a time window, an appeal path — false-positive risk falls. If not, it remains a blind spot.

Third, the first public false-positive case. This is the test variable for the credibility of the intent-based standard. One such case carries more weight than any enforcement report.

Fourth, evidence of adaptation. When boosting groups move to off-platform communication and harder-to-detect coordination patterns, the arms race is still running.

An empty stadium in summer, and I hear data dripping one drop at a time. Announcements like this are usually skimmed between official matches. But this is operational data — the kind that determines the value of the very arena those official matches are played in.

Some matches end when the referee blows the whistle — and some only begin when the data speaks. 296,416 accounts is an opening sentence. The hardest part of the story lies in the next disclosure, when the first total can finally be placed beside a second.