A Used Ryzen CPU, a Silent Ban: How VALORANT's Vanguard Punished an Innocent Buyer

1:40 a.m. in Khulna. The tea on my desk has gone cold and my laptop is open on a German Reddit thread with an innocuous title: “I can't play VALORANT.” Inside, the story stops being innocuous. A player bought a secondhand Ryzen 7 5800X3D on Kleinanzeigen. He installed it, launched the game, and was thrown out immediately. Riot Support later told him the CPU's serial had already been blacklisted in Vanguard — on August 12, roughly six weeks before he bought it. I opened that thread expecting jokes and found a national autopsy — not of Bangladesh alone, but of the whole PC-gaming economy. Vanguard is a kernel-level anti-cheat. Its job is not only to scan game files; it also watches which hardware sits inside the machine. The reason is simple. A cheater banned on one account simply opens a new one. So publishers step one level below the account — to a hardware ID ban, HWID for short. If the machine itself is marked, a fresh account buys you nothing. That mechanism works as long as the machine keeps the same owner. For this German player, it didn't. He is not a cheater. He bought a part whose history he could not know. Kleinanzeigen is one of Germany's largest secondhand marketplaces, where thousands of CPUs, GPUs and motherboards change hands daily. A buyer judges a part by its sticker, its invoice, its warranty card. Whether it once carried a ban is something he has no tool to check. The case rolled from Reddit to Kotaku, then to PCWorld. That three-step spread is itself a data point — one person's private complaint is now a case study in a policy debate. PCWorld called such cases “rare” without giving any number. Riot has still said nothing official, and the player has not disclosed his name. At the centre of the story sits a simple, uncomfortable calculation. HWID bans were born with honest intent — to stop ban evasion. If a cheater just opens a new account, the punishment becomes a story about losing an ID, which costs cheaters nothing. Without marking the machine, there is little way to stop that race. But machines do not stay still, and neither do people. A CPU is pulled from one owner's case, listed on a marketplace, and seated in a new machine. The punishment then travels with the hardware; its address never changes. Vanguard did not stop the cheater; it stopped the machine the cheater left behind. And that machine is now in innocent hands. The second thing that stopped me was granularity. In the language Support used, a specific CPU serial was flagged. That means Vanguard's fingerprinting is fine enough to single out one component rather than hashing a whole machine. As a design, that is powerful; as a risk profile, it is dangerous, because a full PC stays in one pair of hands while components move through many. The bigger signal came from the player's claim that Support told him swapping only the graphics card would not fix it, because “other components had also been affected.” If true, the ban is not pinned to a single serial but holds a machine-wide association. The penalty is larger than one part, and for an innocent buyer it is close to replacing the entire system. This is where my own experience surfaces. Years ago I bought a secondhand graphics card from a market in Khulna and tested it at the seller's home. What I checked was artefacts, temperatures, fan noise. What I had no way to check was whether the card had ever been flagged by an anti-cheat system. I still don't. A buyer has no screening tool before purchase and no guaranteed remedy after it. I have stopped counting Reddit's roar and started counting serial numbers. On rules, the problem grows. Riot is simultaneously rule-maker, enforcer and commercial stakeholder. If it never publishes how bans work, who hears an appeal, and how long a reply takes, the affected user's only recourse is a support ticket. There is no independent arbitration. And once a ban attaches to hardware rather than an account, that governance gap stops being theoretical and becomes real money. The third layer is the market. The secondhand parts market is not just about cheap upgrades. In Bangladesh, India and Germany alike, new entry-level players — even amateur tournament players — build their rigs from it. The next generation of any competitive shooter's talent pool rises from exactly this market. If an invisible flagged-part risk enters it, the loss belongs not to one buyer but to the entire amateur pipeline. Here I have to dismantle my own argument, because the biggest enemy of a hot take is the hot take itself. The first objection is evidentiary. The whole case is one person's report, and Riot has not independently confirmed it. Screenshots, support chats, timelines — all of it is his side of the story. Claiming a wrongful ban is nothing new on the internet. Declaring “Vanguard is broken” from this single case lets speed outrun proof. The second objection is numerical. PCWorld called such cases “rare,” but how rare — one in a thousand, one in a hundred thousand — is nowhere. Until a false-positive rate is published, I have no baseline. Equally, abandoning cheat prevention entirely would reward exactly the people who cheat; that cannot be left out of the ledger either. The third objection is about where blame sits. If someone is at fault, it may not be Riot — it may be the seller who knowingly or unknowingly moved a flagged part, or the marketplace that carries no verification duty. Pouring all anger at Riot hides the real liability. Still, one thing is clear. As long as anti-cheat descends from the account to the hardware, the chance of an innocent buyer getting stuck will never be zero — it is an inherent risk of the method, not an accident. My prediction is simple. Within the next two quarters, either Riot will publish a public appeal route and a response deadline for HWID bans, or a separate layer of “clean hardware” verification will appear in the secondhand PC market — much as IMEI checks once grew around the market for flagged phones. The question, though, is not for Riot but for us. When the sentence falls on a machine instead of a person, who signs the verdict?