Not All Cheating Is the Same
Revenue loss and reduced player engagement are just two of the significant consequences of cheating in online games. While most large companies have developed home-grown solutions to deal with this significant challenge, the problem of cheating is highly fragmented and much more complicated than it appears on the surface.
Most live ops teams classify any suspicious activity under a single category of cheaters. In reality, there is a wide variety of cheating behaviors and motivations, each with different effects on the game. This diverse cheating ecosystem requires tailored responses, such as warnings, temporary suspensions, permanent bans, and other actions, depending on the severity and impact. To handle this effectively, it’s crucial to segment users based on the type and impact of their cheating behavior. But how can you determine the appropriate action for each case?
There are two main types of cheating activities: commercial cheating – mainly large operations run by cheaters motivated by money, and indie cheating – mainly hyper-engaged players who enjoy the game and want to get more out of it.
This guide reviews the various cheating typologies and motivations, and discusses how distinguishing between them gives your team crucial data that can help you determine the proper policy and response. Treating cheaters appropriately increases the engagement of your key players by removing the nuisance factor, and prevents leaks of in-game revenue to unauthorized third parties.
Why In-Game Cheating Protection Is Important
While tools like CAPTCHAs and two-factor authentication (2FA) handle cheaters at the registration and payment stages, they don’t address what happens once a cheater gets inside the game. CAPTCHAs, for instance, are commonly used in games, but often fail because bots can solve them or other advanced techniques can bypass them. For example, a CAPTCHA might prevent automated account creation, but it cannot detect cheating tactics being used during gameplay. This makes CAPTCHAs insufficient for in-game cheating protection.
In-game cheating, such as using aimbots, speed hacks, exploiting bugs, and more, can go undetected for months, causing significant damage. Cheaters can manipulate the in-game economy, frustrate genuine players, skew game analytics, and erode trust in the game’s integrity.
Adopting a holistic approach is essential: you cannot rely solely on perimeter defenses. Both perimeter defense and in-game cheat detection need to be managed to effectively combat cheating. In-game cheating detection targets the core of the player experience, ensuring long-term sustainability and player satisfaction. Without robust in-game protection, the game’s community and economic balance are at constant risk, ultimately undermining the game’s success.
Fifty-Thousand-Foot View of Cheating Tools
Before explaining the different types of cheating, it’s important to understand some of the tools that cheaters use to achieve their aims.

Bots, Scripts, and Automations
Bots, scripts, and automations are software programs that automate actions within a game, allowing players to gain unfair advantages. These tools can perform repetitive tasks, execute complex sequences, or mimic human behavior, making detection challenging for game administrators. There are various types of automated tools, including malicious bots specifically designed to exploit game mechanics and disrupt gameplay. For instance, in “World of Warcraft,” players used farming bots to collect resources like gold and rare items. By continuously performing resource-gathering tasks that players would otherwise need to do manually, farming bots can flood the in-game economy with resources, often leading to inflation and other economic imbalances.
These automated tools hurt gaming studios’ monetization strategies. Studios often design certain tasks to retain players longer, but players use bots or buy items outside the game to bypass these tasks, leading to revenue loss for the studios. These software cheating tools can be found in all game genres.
Emulators
Emulators are software programs that replicate the hardware and software of a gaming device, allowing users to play games designed for that platform on a different device. For example, they enable users to run mobile apps and games designed for specific mobile platforms on a PC or another mobile device. In “Mario Kart Tour,” players that used emulators gained an unfair advantage with more precise controls and enhanced graphics.
Emulators work by mimicking the behavior of the original hardware, including its CPU, GPU, memory, and input/output systems. Emulators also provide a fertile ground for hacks and automation by making it easier to plug additional software into the original application, automate certain interactions, make changes in the device memory, and even switch accounts/devices very quickly.
Macros and Hotkeys
Sometimes, players use hacks such as macros (enabling one button to perform several actions), giving them a superhuman capability to act faster or more accurately than other players. For example, in “Mortal Kombat,” executing a combo move like a Fatality requires a precise sequence of inputs, which can be difficult to perform quickly under pressure. A macro can automate this sequence, and would clearly give the player an edge over others.
Additionally, farming macros can automate repetitive resource-gathering tasks, allowing players to accumulate in-game currency, items, or experience points effortlessly. Often, emulators enable premade macros and hotkeys for specific games, further enhancing these automated processes.
Input Devices
In some action-packed games, some players use external hardware devices such as Cronus Zen “controller emulator” to boost their performance or make it easier to control the game. For example, in “Fortnite,” players can use Cronus Zen to enable features like rapid-fire mods, which allow for faster shooting, or aim assist enhancements, which improve aiming precision. This provides a significant and unfair advantage, compromising the competitive integrity of the game.
Hacked APKs
These are alternative software clients developed by third parties to access and play a particular online game. These clients offer additional features and modifications beyond the official game client, and often go far beyond mere “modding.” For example, in “Among Us,” a hacked APK might provide players with the ability to always be the impostor, see through walls, or have unlimited use of abilities, giving them an unfair advantage. These APKs can enhance performance, graphics, and user interface customization, or add in-game tools. For game developers, hacked APKs are particularly problematic because they block information flow, which prevents detection of cheating and often violates the game’s Terms of Service.
Multiple Accounts
While it is common for legitimate players to have several accounts, the usage of multiple accounts becomes problematic when it exceeds a certain number, a typical tactic of commercial cheaters. After a certain threshold, controlling multiple accounts can provide an unfair advantage by manipulating rankings, exploiting game mechanics, or bypassing penalties.
Additionally, some commercial cheaters exploit this practice for monetary gain, using multiple accounts to dominate in-game economies, influence markets, or sell high-level accounts. For example, commercial cheaters may control thousands of accounts, trading with each other and “feeding” certain accounts with resources. These pampered accounts can later be sold at high prices, or the accumulated goods can be sold online, disrupting the in-game economy and providing an unfair advantage.
The following diagram illustrates how commercial cheaters use multiple accounts to trade resources and feed select accounts:

Game Hacks
The use of game hacks involves employing unauthorized software or tools designed to alter game mechanics and provide unfair advantages. This includes exploiting vulnerabilities, bypassing security measures, and manipulating game data. Some highly engaged and interested players actively seek out or develop these hacks, often sharing their discoveries in online forums dedicated to game hacks. Game hacks enter the commercial cheating arena when cheaters leverage them for monetary gain, selling hacks or using them to manipulate in-game economies and rankings for profit.
Direct API Manipulation
Hackers may mimic the client’s (game app) API to directly interact with the app backend. This method is the easiest and simplest form of cheating, allowing hackers to complete game tasks more quickly, disrupting the game’s balance and fairness. For example, in “Fortnite,” hackers used API manipulation to automatically complete challenges and gain rewards without actually playing the game. This method is particularly effective for automating farming processes, where hackers gather resources at an accelerated rate, significantly impacting the gameplay experience for legitimate players.
Commercial vs. Indie Cheating
Commercial Cheating
Now let’s explore the business side of cheating. Commercial cheating is a business. Just like any other business, it needs to scale up to achieve worthwhile profits, since each individual transaction is relatively small. This type of fraud primarily targets games with a large number of players, so they can count on massive activity. These businesses can achieve revenues of tens of millions of dollars per year per game!
There are several attack vectors that commercial cheating operations typically use:
Selling of Unauthorized Services or Tools
Unauthorized external organizations may sell a service outside the game that helps advance players inside the game. There are several options:
- Selling a bot that players can operate on the players’ own devices, which provides unfair advantages in the game (e.g., a farming bot or an aimbot).
- Operating players’ accounts over emulators in a remote cloud, on the cheaters’ infrastructure, to nurture accounts and expedite the players’ progress in the game.
- Selling game intelligence services in real time, which provides an unfair advantage to certain players. For example, information about which opponents are the weakest and should be attacked, the capabilities of other players, or even revealing the entire world map for the player.
On some occasions, players need to hand over their credentials to the cheaters to activate the cheat. This can lead to additional fraud or scams, where cheaters take over legitimate accounts to loot them, sell their accounts to others, steal their personal data, or otherwise exploit them.
Trading and Selling In-Game Currency or Items
Cheaters may exploit the popularity of a game to offer easy gains to players. In most cases, the cheaters will gain these resources by nurturing accounts over a long period of time (through automation or manually in device farms) and then offer these resources for sale outside the game. The players pay the cheaters up to hundreds or thousands of dollars on an external platform, then receive their purchase inside the game for a token amount of game currency or trade. Once the first transaction is completed, it is very easy to purchase from the same provider again, since the buyer and seller are already connected in the game.
Sometimes, the operators behind this cheating scheme will spam other players inside the game to offer their forbidden goods, further impacting the player experience.
Another risk associated with this type of cheating is scams. An online service may promise to provide in-game goods, then take players’ money without providing anything in return, leaving the players with no one to complain to.
Win-Trading
Some cheaters manipulate the outcome of matches or competitions in multiplayer games by intentionally losing, influencing who actually wins. This behavior aims to elevate the purchaser’s ranking or help them acquire in-game rewards. In certain games, trading can only happen when winning or losing battles. Cheaters use these battles to trade in-game currency or items obtained through illegal means outside the game. So the winner, who purchased their win illegitimately, gains the win plus whatever goods the sellers transferred to them in the battle.
Account Selling
In this case, cheaters create game accounts and build bots to play the game. The bots play consistently so that the account achieves increasingly higher levels, prizes, unique products, and so on. These accounts run on emulators that mimic the behavior of iOS or Android.
In many cases, the emulators run on cloud servers, which makes cheating very scalable. Millions of fake users are created daily in various games worldwide. The cheaters grow these accounts, and once they have reached maturity (i.e. a certain level in the game), they sell them for tens or even hundreds of dollars online. This is gamer revenue leaking directly out of the gaming company’s sales funnel.
Account Phishing/Takeover
In this case, cheaters aim to take over existing accounts to sell them in a marketplace or try to blackmail the owners. These attack vectors are mostly active in the game login or support areas. Sometimes cheaters use third-party services, fake or real, as bait for players to hand over their credentials and make their accounts an easy takeover target.
Money Laundering
Some cheaters use stolen credit card information to purchase in-game currency or items, which they then resell for a fraction of the original cost to other players. The transactions are made with the intent to launder money from stolen credit card details. Accepting in-app purchases with stolen credit cards can lead to chargebacks and, again, lost revenue.
Indie Cheating
Indie cheating is less about the business, and more about the players’ love for the game. Typically, the cheater simply wants to progress further or faster, or they may be curious about bots and the technology behind the game. They are typically looking for an unfair advantage, like extra in-game resources, to make the game more fun.
For example, players may cheat by purchasing bots from commercial cheating companies. These bots can systematically grow their accounts while the players are not actively playing, such as while they are sleeping. Then they continue playing genuinely with the same account during the day. Others purchase third-party services which activate cheats on their accounts in a remote environment. Usually, these types of commercial cheating services are also a source of additional trouble for the players – from account takeover to password spoofing and a wide range of other harmful behaviors.
These highly engaged indie cheaters may also invest their own time and attention in creating automations or hacks. For example, they can purchase or deploy (or even build themselves, due to the rapid development of generative AI) a bot to win certain battles instead of the player.
Unfortunately, indie cheating has a negative community element to it; that is, when players notice a massive amount of cheating around them, they either get turned off completely, or they look for ways to cheat themselves, to be at a similar level to the players around them.
How to Mitigate Cheating
Now that we have outlined the various types of cheaters and cheating techniques, let’s talk about next steps. The goal of each gaming company or studio should be to mitigate the risks of cheaters and preserve engaged players, while maintaining an environment of fair play. We recommend aiming for real-time detection and policy enforcement to limit the impact of cheating on your legitimate players, and to get the message across to commercial cheaters that their nefarious ways are unwelcome.
Mitigation is a combination of acting fast, acting smart, and acting often.
Let’s start with fast. Both the cheaters and the gaming companies have access to advanced coding tools and GenAI. This means the pace of change is quicker than ever before. The only solution is to make an effort to always be one step (or more) ahead of the cheaters. The static prevention tools used by many gaming companies, such as emulation detection or anti-modding tools, typically delay cheaters but do not block them. We have seen over and over again how the fraud perpetrators eventually bypass these defenses.
Acting fast is not enough, you must also act smart. Consider your short- and long-term goals, and build a strategy that can accomplish them. For example, naively banning every type of cheating may simply encourage the cheaters to evolve more quickly.
And lastly, cheating is an ongoing arms race between the cheaters – whether indie or commercial – and the game developers. Developers need to continuously deal with this threat, or it will take over the game and push the engaged players out. So you must act often.
Managing Cheating in Practice
Managing cheating successfully is a complicated process. Unfortunately, most companies lack the tools to classify and differentiate between different types of cheating. Without highly granular visibility into player behavior inside the game, it is nearly impossible to make smart decisions that will benefit the game and its user experience.
Gaming companies need a way to identify the most damaging cheaters that are costing them money and player engagement, in a highly complex environment that is full of mixed signals. Recognizing that there are diverse groups of cheaters, each with different characteristics, is a crucial start. Each group should be treated with a relevant policy – banning is not the only solution. Methods like shadowbanning, temporary suspensions, or restrictions on certain game features can be effective alternatives. There are also other options available.
Accuracy is of the utmost importance. Misclassifying a highly engaged player as a cheater could lead to massive dissatisfaction and disengagement. Accurately identifying your cheaters’ typology allows appropriate policy enforcement that increases overall efficiency and preserves players’ trust.
Highly engaged players – even those who pay for external services to promote themselves – do not typically pose the same danger as commercial cheating companies. In fact, if a gaming company blocks these players, it can hurt the game in the long run by upsetting true fans. The goal should be to limit the inventory and effectiveness of their cheating tools while also making an effort to preserve them as engaged players. In fact, analyzing their behavior can help improve the game, since in their love for the game, they are trying to find ways to make it even more enjoyable. Turning some of their cheats into legitimate features can be a win-win, showing them that you are listening and learning from them and that you care as much about improving the game as they do. In other words, it can be OK to allow some cheating as long as it is carefully tracked. You should, however, make a concerted effort to eliminate cheating in highly visible locations such as tournaments and leaderboards, to maintain the authenticity of the game.
Commercial cheaters are usually well-funded companies that are driven by profits. This means that limiting their revenue and changing the mechanics of their underlying ROI is the best way to handle them. After taking action against the commercial cheating accounts, they will reorganize, make changes to their activity to avoid detection, and then come back in measured steps. Since it is a cat-and-mouse game, it is important to limit their ability to learn your detection mechanisms. For instance, banning all of their accounts on an hourly basis will provide them with a very quick feedback loop to learn the detection system. It is important to spread out any bans to increase confusion among the cheaters, preventing them from learning how to evade your cheating detection patterns.
Gain Crucial Visibility Into Cheating
By maintaining engaged players and identifying cheaters’ behaviors, companies can limit the impact of cheating and its associated revenue loss and reduction in player engagement.
Contact Quago to learn how to gain crucial visibility into cheating.



