Valorant account security: Riot MFA, ranked verification, region rules and scams

To queue Competitive, Riot requires Riot Mobile MFA on accounts ranked Ascendant or above and on accounts it suspects are shared. If yours is one of them, a Verify Account button replaces Start, and ranked stays locked until you finish.

The rule went live in NA, LATAM, BR and KR on October 28, 2025, in EU on January 21, 2026 and in APAC on February 18, 2026. It never expires, so an account that reached Ascendant once still needs it after a bad streak. An authenticator app does not satisfy it. Only Riot Mobile does.

Riot’s stated targets are smurfing and stolen accounts. Its announcement says 80 to 90 percent of stolen accounts have MFA disabled, and that owning more than one account does not, by itself, trigger the shared-account check as long as none of them is shared.

This message means Riot saw activity that strongly suggested someone else got in, and acted before anyone reported it. Riot may reset your password, reverse certain changes or purchases tied to the compromise, restore details the intruder changed, or require extra recovery before you can sign in.

Start with the Recover & Secure Account option in that email and choose a password you have never used elsewhere. Then check the email address, linked accounts, MFA settings and recent purchases, and report anything unfamiliar to Player Support. Riot also suggests securing your inbox and running a full malware scan.

If that option fails, use the Account Recovery Tool or a recovery request to Player Support, where you may need to prove you are the original owner. An Unusual Login Activity alert is milder: it only asks you to confirm a sign-in from an unfamiliar device or place. And Riot will never ask you to send your password or authentication codes.

Riot Vanguard is Riot’s in-house anti-cheat: a client that runs while you play plus a kernel-mode driver. Riot requires it to stay active while you play, and because it normally starts with Windows, switching it off means a restart before your next match. Remove it and the next VALORANT launch reinstalls it automatically.

Since June 2026, an optional on-demand mode called Vanguard Pre-Check runs Vanguard only while a Riot game is open. It needs Windows 11 25H2, Secure Boot, TPM 2.0, memory integrity (VBS and HVCI) and IOMMU switched on. Riot also notes that VALORANT, unlike League, already requires Secure Boot for Windows 11 players.

The account risk sits in what players install next to the game. Riot warns that malware can feed your login details straight to attackers, and that queuing with a cheater, known as bussing, can get you banned too. Treat any download promising free skins or a way around Vanguard as one of those two problems.

Your Region of Residence sets payment options, currency, default language and your shard: AP, EU, KR, BR, LATAM or NA. Both come from where you physically were when you created the account, and you can only play with friends on the same shard. Inside it, a party leader or solo player can still pick a server with Server Select.

Riot only changes a Region of Residence to match where you really live, and warns you to be careful when playing through a VPN. After a move you wait 90 days before the next. Unless you move between NA, LATAM and BR, you lose current ranked season progress, match history and purchase history, while your collection, agents, account level and MMR come with you. Requests go through Riot’s Region of Residence page or a ticket with your username, Riot ID and tagline, email, current region and target region.

Most Valorant scams sell something the game does not actually do. Riot’s store, gifting and billing rules make them easy to spot.

Riot’s Terms of Service say you cannot share your account or login with anyone, and cannot sell it, transfer it or let another person access it. VALORANT’s own rules call boosting, where someone logs into your account to win ranked games for you, a bannable form of cheating.

Riot defines a shared account as one whose owner deliberately handed over the login so someone else could play. Its detection looks for signs that different people play the same account, and flagged accounts must complete Riot Mobile verification. Riot also bans accounts it is confident were purchased and used for boosting, and notes that sharing an account can make it much harder to recover.

Console VALORANT needs a Riot Account, so link your main one. Skins, VP, agents and Battle Pass progress are shared with PC, while console rank and MMR stay separate, and crossplay covers Xbox and PlayStation but never PC. Riot says keyboard and mouse are not supported on console, and spoofing them gets you banned.

Riot asks for specific details when something goes wrong, and most players hunt for them only after a lockout. A LoginScout card keeps them together, encrypted: