Dota 2 VAC Anti-Cheat: How It Works and Ban Policy
Verified November 6, 2026 · Status: live
Valve Anti-Cheat (VAC) runs alongside Dota 2 as a user-space detection system that scans for programs injecting anything into the game — distinct from Riot’s kernel-level Vanguard — and bans account-wide upon detection. Unlike Vanguard, VAC does not run in the kernel. Its most recent feature detects players using third-party software to check other players’ most-picked heroes before match start. Verified on 6 November 2026.
Sources: Valve (via Steam Support); community coverage.
What VAC does
- Scans for injectors. VAC detects third-party programs that inject code into Dota 2’s memory space.
- Delayed bans. Detections trigger bans, but not always immediately — Valve groups ban-waves to make reverse-engineering harder.
- Account-wide impact. A VAC ban on one Valve game typically VAC-bans the account from all Valve multiplayer titles.
- Recent feature. VAC now flags third-party software that checks other players’ most-picked heroes during match setup.
How VAC differs from kernel anti-cheats
| Characteristic | VAC (Valve) | Vanguard (Riot) |
|---|---|---|
| Runs in kernel | No — user-space | Yes — kernel-level |
| Runs at boot | No — only when game runs | Yes — Vanguard runs at boot |
| Detects DMA cheats | Limited | Yes (Vanguard 2.0+) |
| User privacy | Higher (less invasive) | Lower (deeper access) |
| Cheat volume blocked | Moderate | Higher per community reports |
What VAC catches
Three categories of Dota 2 cheats VAC targets:
- Memory injectors. Programs that modify Dota 2’s running memory (map hacks, auto-cast scripts).
- Script runners. Automation tools that execute input sequences on the player’s behalf.
- Data-overlay tools. Third-party overlays that show hidden match data (though recent feature now catches hero-pick-overlay tools specifically).
Ban waves
Valve’s ban-wave pattern for Dota 2:
- Detections accumulate silently over days or weeks.
- Valve announces ban-waves after processing — sometimes 10,000+ accounts banned at once.
- Pro-scene bans: Valve banned 46 players (including the entire Knights team) after an early-2023 Chinese DPC event.
- Larger community bans: 40,000+ Dota 2 cheaters banned in a 2023 anti-cheat wave per Valve statements.
How to report a suspected cheater
Dota 2’s in-game report flow:
- Right-click the suspected player’s name in the post-match screen.
- Select Report.
- Choose the category (Griefing, Game Abuse, Communication Abuse, etc.).
- Submit — Valve reviews reports as part of their automated detection pipeline.
Reports don’t individually trigger bans — they feed Valve’s larger detection system.
Checking if your account is VAC-banned
Steam shows VAC status on the account:
- Open Steam → Help → Steam Support.
- Click Games, Software, etc.
- Select Dota 2.
- Any active VAC ban appears in the game’s support section.
VAC bans are permanent and non-appealable. Valve’s policy: ban-appeal requests are not reviewed individually.
VAC’s limits
Why VAC catches fewer cheats than Vanguard:
- User-space limits mean VAC can’t inspect kernel-level cheats.
- Can’t see hardware-level cheats (DMA rigs) that bypass memory access checks.
- Offers higher privacy to legitimate users at cost of lower cheat-catch rate.
Valve has publicly accepted the trade-off: less invasive anti-cheat in exchange for a smaller detection surface.
FAQ
What is VAC?
Valve Anti-Cheat — Valve’s user-space detection system that runs alongside Dota 2 and scans for programs injecting code into the game. Detections trigger account-wide Valve-game bans.
Does VAC run in the kernel?
No. VAC is user-space — it doesn’t require kernel-level access. This is a key difference from Riot’s Vanguard, which does run in the Windows kernel.
What happens when VAC bans me?
Account-wide: the ban applies to all Valve multiplayer games (Dota 2, CS2, TF2, Left 4 Dead 2). VAC bans are permanent and non-appealable per Valve’s policy.
Can I appeal a VAC ban?
No. Valve’s policy is that VAC ban appeals are not reviewed individually. If you believe the ban is a false positive, Valve’s support may review in exceptional cases but rarely overturns.
What specific cheats does VAC catch?
Memory injectors (map hacks, auto-cast scripts), script runners (automation), and data-overlay tools. Recent feature: overlays that check other players’ most-picked heroes during match setup.
Why doesn’t Valve use kernel anti-cheat?
Valve’s approach prioritizes user privacy and lower system intrusion. Trade-off: kernel anti-cheats catch more cheats but require deeper system access.
How do I report a cheater in Dota 2?
Right-click the player’s name in the post-match screen → Report → select category → submit. Reports feed Valve’s larger detection pipeline rather than triggering individual bans.
Related guides
