Disclaimer: The views and opinions expressed in this article are solely those of the author. The mention of any products, services, or methods does not constitute an endorsement.
A competitive shooter can ban thousands of accounts and still leave the business supplying their cheats untouched. The software seller collects subscription fees, updates its product after a detection wave, and looks for new customers. For a publisher trying to protect an online game, removing individual cheaters does little to stop the next batch from arriving.
Legal threats have long been another option. Publishers can demand that a cheat developer shut down, but a cease-and-desist letter is a warning, not a court order. Bungie, Activision, and Epic Games have increasingly pursued damages, injunctions, and claims against people alleged to develop or distribute cheating software. The resulting cases reveal both the reach of that approach and the difficulty of turning a favorable ruling into lasting disruption.
Why a Warning Letter May Not Stop a Cheat Business
A cease-and-desist letter tells its recipient that the sender believes certain conduct is unlawful and demands that it stop. Some recipients comply, particularly when a modest side project is unlikely to justify the expense of litigation. Others dispute the allegations or continue operating, knowing that the sender must take further action to obtain an enforceable order.
For an established cheat provider, the calculation can be commercial. Subscriptions generate recurring income, while resellers, customer-support channels, and private forums may keep sales moving when a storefront is interrupted. These arrangements vary between providers, and their existence does not establish that any particular business is organized in the same way. They do explain why a demand addressed to one operator may have less effect than a publisher hopes.
Detection also creates pressure on both sides. A game update or ban wave can make a cheat temporarily unusable, prompting sellers to revise it before customers cancel. Publishers have to defend live services continuously, whereas a provider may need to find only one workable bypass to resume sales. A letter cannot patch that vulnerability or identify every person profiting from the software.
Why Breaking a Game’s Rules Is Not Automatically Copyright Infringement
A player who uses an aimbot ordinarily breaches the game’s rules, but a rules violation is not automatically a crime or a copyright violation. To recover damages from a cheat seller, a publisher needs a legal claim supported by the conduct at issue. U.S. cases have involved contract claims, copyright infringement, interference with contractual relations, and the Digital Millennium Copyright Act (DMCA).
Section 1201 of the DMCA addresses circumvention of certain technological protections controlling access to copyrighted works, as well as trafficking in technologies designed for prohibited circumvention. That can provide a route to liability when cheat software bypasses qualifying access controls. The outcome still depends on what a protection actually does, how the accused product interacts with it, and which statutory requirements are satisfied.
An early example came from *World of Warcraft*. Blizzard challenged Glider, a bot sold by MDY Industries, and the Ninth Circuit examined the relationship between the game’s license terms and copyright. In its [2010 decision in MDY Industries v. Blizzard Entertainment, the court held that violating the relevant anti-bot promises did not itself make Glider users copyright infringers. It nevertheless upheld MDY’s liability under a DMCA anti-circumvention provision concerning access to protected game content.
That distinction places limits on how publishers can use intellectual-property law. A contractual ban on unauthorized programs may justify account sanctions or a contract claim without turning every violation into copyright infringement. Developers of accessibility tools, legitimate mods, and interoperability software also have reasons to care about how those boundaries are drawn, even though their conduct and purposes can differ sharply from commercial competitive cheating.
Bungie and AimJunkies: Two Proceedings, Very Different Awards
Bungie’s dispute with the *Destiny 2* cheat seller AimJunkies showed why publishers may pursue more than one legal avenue against the same operation. The case involved allegations concerning cheat development and distribution, but its most widely reported outcomes came from separate proceedings. Treating their awards as one undifferentiated judgment would obscure what each actually decided.
In May 2024, a federal jury found AimJunkies-related defendants liable for copyright infringement and awarded Bungie $63,210. The figure was close to the revenue that defendants said they earned from approximately 1,400 copies of the cheats. As Ars Technica reported after the verdict, the jury trial stood apart from the more common pattern of cheat-related disputes ending in settlements or judgments without a trial on the copyright allegations.
Another set of claims went to arbitration under Bungie’s software license agreement. The arbitrator awarded Bungie $4,396,222, and the district court confirmed that award. AimJunkies challenged the arbitration, arguing that its ability to use deposition testimony had been improperly restricted. In August 2024, the Ninth Circuit affirmed the confirmation, finding no basis to overturn the award on the procedural grounds presented.
The distinction between those results matters more than the size of the larger number alone. The jury resolved copyright issues submitted to it, while the arbitration covered other claims arising from the dispute. Neither ruling, by itself, establishes that Bungie collected every dollar awarded. A large enforceable claim may threaten the economics of a cheat business, but recovery depends on the defendants’ assets and the available enforcement mechanisms.
Activision’s EngineOwning Judgment Targeted a Distribution Channel
Activision took a different route against EngineOwning, which was accused of selling cheats for *Call of Duty*. In May 2024, a federal judge in California granted Activision a default judgment of $14,465,600 in statutory damages, along with $292,912 in attorneys’ fees. Because the defendants did not continue defending the case, the judgment was not the outcome of a fully contested trial.
Activision’s calculation relied on its estimate of 72,328 U.S. users connected to the accused cheats, derived from its investigation of accounts disabled for cheating. Multiplying that estimate by $200, the statutory minimum Activision sought per violation under the DMCA, yielded the damages figure. That method should not be mistaken for an independently verified count of purchases or proof that each customer paid the same amount.
The court also ordered that the EngineOwning.to domain be transferred to Activision, as described in Bloomberg Law’s report on the ruling. Domain control matters because a familiar address can direct customers to downloads, renewals, and product support. Interrupting that access can be more immediately disruptive than sending another demand to an operator who has already ignored legal warnings.
Still, an order to transfer a domain is different from confirmation that the transfer was completed, just as a damages award is different from payment. Customers and sellers may move to other channels, while cross-border enforcement can slow efforts to reach money or infrastructure outside the United States. The case demonstrates the tools a court can authorize without proving that every part of the underlying business has been permanently disabled.
Bungie’s Ring-1 Case Reaches Beyond the Name on a Storefront
Commercial cheat operations can involve people other than the programmers writing the code. Alleged roles in sales, testing, administration, and distribution may become relevant when a publisher seeks to identify who participated in an unlawful activity. Responsibility still has to be established defendant by defendant, rather than inferred from membership in a forum or familiarity with a software seller.
Bungie’s lawsuit concerning Ring-1, filed in 2023, illustrates that wider scope. An amended complaint filed in August 2025 alleged copyright infringement, DMCA violations, breach of contract, and violations of the federal Racketeer Influenced and Corrupt Organizations Act, among other claims. Those were Bungie’s allegations, not judicial findings that the defendants had committed racketeering offenses.
A July 2026 order addressed one defendant, Canadian resident Vincent Magny, whom Bungie alleged had worked as Ring-1 forum staff and a quality-assurance tester. Magny sought dismissal for lack of personal jurisdiction. The federal judge denied that motion, finding that Bungie had sufficiently shown his agreement to *Destiny 2*’s license terms, including a clause consenting to jurisdiction in Washington.
The ruling allowed the claims against Magny to proceed in that court; it did not establish the truth of Bungie’s underlying accusations. Its importance lies in a narrower legal issue: under the circumstances presented, accepting a game’s license could affect where a related dispute may be heard. Even after a court establishes jurisdiction, proving liability and enforcing any eventual judgment against a person abroad present separate challenges.
Epic Games Pairs Litigation With Technical Restrictions
Epic Games has pursued cheaters and cheat suppliers through lawsuits while changing the technical requirements for *Fortnite* competition. In a February 2026 update, Epic described a $175,000 judgment against a tournament cheater who did not defend a lawsuit. It also reported suing an alleged cheat developer and people accused of helping sell the software, alongside settlements in other enforcement matters.
The same official Fortnite enforcement update announced that, beginning February 19, 2026, all PC tournament participants would be required to have Secure Boot, TPM, and input-output memory management unit (IOMMU) support enabled. Secure Boot helps validate the startup process, while TPM supplies hardware-backed security capabilities. IOMMU helps control devices’ access to system memory, which can matter when cheat hardware attempts to read game data outside normal software pathways.
These measures address a problem that a lawsuit cannot solve on its own. Removing one supplier does not prevent a different developer from attempting a memory-based exploit or finding another weakness. Conversely, raising security requirements can exclude legitimate competitors with older or incompatible hardware and may increase support demands. Anti-cheat enforcement therefore involves decisions about detection, device trust, and acceptable costs for lawful players as well as legal accountability.
Why Winning in Court Does Not End the Cheat Market
A multimillion-dollar award can make cheat distribution a dangerous business, but it is not equivalent to shutting down every seller. Courts can impose damages and injunctions only within the reach of applicable law and procedure. Recovering assets abroad, identifying people operating under aliases, and securing compliance with orders can require additional work long after the headline judgment.
The technical contest also continues independently of litigation. Cheat products may be rebuilt after detection, distributed through new channels, or adapted to different games. Some target client memory; others seek information through hardware or exploit server-side flaws. The means vary, so a court order addressing one product or defendant cannot substitute for ongoing engineering and enforcement.
Aggressive litigation has limits worth preserving. The legal questions become less straightforward when software involves security research, accessibility, or other modifications that do not share the purpose or effect of a competitive cheat. Courts have to examine the specific technology and conduct rather than treating a publisher’s rules as a universal definition of unlawfulness. That scrutiny protects legitimate activity while leaving room for strong claims against businesses shown to have violated the law.
Competitive Leagues Still Have to Defend Their Own Results
For organized multiplayer communities, a cheating incident can contaminate more than one match. An illegitimate result may alter ladder standings, eliminate a team from a bracket, or influence later pairings. Reversing it may require checking recordings, server logs, player reports, and the results of subsequent matches, often under deadlines that leave administrators little room for error.
Volunteer-run leagues rarely have the resources to sue commercial cheat providers or build their own kernel-level detection systems. They can, however, define what evidence supports a finding, preserve match records, provide a fair appeal process, and set penalties before disputes arise. Clear procedures matter because a suspicious performance and verified misconduct are not the same thing, particularly in games where skill gaps and inconsistent connections can produce unusual results.
Publisher lawsuits can reduce access to specific cheat products, and technical defenses can make some methods harder to deploy. Neither remedy repairs a disputed tournament bracket automatically or resolves accusations left behind by a cheating scandal. That work remains with the organizers who can examine the evidence from the matches themselves, decide what the rules permit, and correct the competition record when the facts warrant it.