Anti-cheat reference library for ban appeal preparation
How the main anti-cheat systems work, what they look at and what that means for an appeal. Pick a system to see its restriction tiers, the evidence that helps and the games that use it.
- Riot Vanguard Kernel-level Vanguard is a kernel-mode anti-cheat that loads at Windows boot through the vgc.exe service and the vgk.sys driver. Because the driver is active before any user-space…
- Easy Anti-Cheat (EAC) User-mode EAC is the most widely deployed anti-cheat in PC gaming, owned by Epic Games. It runs as a user-mode service that launches alongside the protected title, builds a…
- BattlEye Kernel-level BattlEye runs deep system inspection through a kernel driver and tends to issue Global Bans that span every BattlEye-protected title at once. The vendor operates a…
- Ricochet Hybrid Ricochet pairs a kernel driver on PC with a server-side mitigation layer (cloaking, damage shield, splat). Activision operates a narrow appeal channel that frequently…
- VAC (Valve Anti-Cheat) User-mode VAC is signature-based and runs in user space. Valve states publicly that VAC bans are not appealable, but adjacent issues — Game Bans, Trade Bans, account-recovery…
- EA AntiCheat Kernel-level EA AntiCheat is a kernel-mode system EA introduced for its competitive titles. Enforcement is concentrated around exploit waves (companion-app abuse on EA FC…
- ACE Kernel-level ACE is Tencent's kernel-mode anti-cheat used across its first-party catalogue and a number of partner titles. Enforcement decisions are typically made by the Tencent…
- nProtect GameGuard (HackShield) Kernel-level GameGuard, distributed under the nProtect brand by INCA Internet, is one of the longest-running kernel-mode anti-cheat systems in the Korean MMO market. It loads a…
- XIGNCODE3 Hybrid XIGNCODE3 is the flagship anti-cheat product of Wellbia.com, a Korean security vendor whose detection stack is deployed across a large catalogue of Asian and global…
- Arbiter Anti-Cheat Hybrid Arbiter is the in-house anti-cheat developed by 1047 Games for Splitgate 2. It combines a kernel-assisted client component with a server-side telemetry layer focused on…
- FACEIT Anti-Cheat Kernel-level FACEIT operates a kernel-mode anti-cheat alongside the third-party competitive platform that hosts most CS2 league play. A FACEIT ban does not prevent base Steam access…
- mhyProt2 Kernel-level mhyProt2 is the kernel-mode driver HoYoverse ships with its competitive and gacha titles. It loads at game launch and persists for the duration of the session…
- Jagex Hyperion Server-side Hyperion is the server-side anti-cheat and bot-detection layer Jagex operates across RuneScape and Old School RuneScape. Because detection is server-side, Hyperion does…
- FairFight Server-side FairFight is a server-side statistical anti-cheat operated by GameBlocks. It does not install a client driver; instead it scores match telemetry against expected human…
- Platform-tier (PSN / Xbox / Nintendo) Server-side Platform-tier restrictions sit above the anti-cheat layer. They are issued by the console operator (Sony, Microsoft, Nintendo) for community-conduct, payment…
Understand the system before you appeal
Anti-cheat bans are not all reviewed the same way. Vanguard, Easy Anti-Cheat, BattlEye, Ricochet, VAC, FACEIT, and platform-level enforcement each leave different signals in the notice, logs, support replies, and account timeline.
False-positive angles that can matter
We look for clean account history, hardware or peripheral changes, overlay and driver conflicts, compromised-login indicators, patch timing, and whether the wording points to software, conduct, account security, or device enforcement.
Build the evidence record first
Before sending another support ticket, preserve screenshots, launcher logs, email notices, support replies, purchase history, device timeline, and any clean reinstall notes.
Get an appeal written for your case
Send us the ban notice and what happened. You see the price and the waiting time before you pay.

