The knock came with a camera. At 9:50 a.m. on August 22, during the Modern Warfare 4 closed beta, a process server stood at an Ohio house and handed Elocarry, a well-known cheat vendor, a cease-and-desist. Call of Duty’s official X account posted the one-minute clip the same day. The framing was not subtle. This was a live RICOCHET takedown. The caption might as well have been a slogan on a crate: “Cheat makers operate around the world. So do we.”
It was good television. It was also, on a closer reading, a letter.
The representative on camera called it an “order.” Reporting later noted it was a demand letter, not a court order. That distinction will not matter to the clip’s intended audience, which is the player who just died to a snap that no human hand could make. It will matter if this story ever leaves the sidewalk and enters a courtroom. Activision has said that courtrooms are coming. For now, the company wanted a porch, a timestamp, and a vendor with a name the community already knew how to hate.
A Porch in Ohio, a Beta in Progress
August 22 was not a random morning. The Modern Warfare 4 closed beta was underway, which means the next annual Call of Duty was already in the wild in the limited, leaky way betas always are. Betas are where new maps get learned, where movement gets argued, and where cheat sellers test whether last year’s work still injects. Serving papers in the middle of that window is a message to two rooms at once.
In one room are the players. The message is: we see it, we are not only writing patch notes, we will show up at a house. In the other room are the vendors. The message is: we will show up at a house, and we will post the video.
RICOCHET is Activision’s anti-cheat brand, the kernel-level system the company has spent years selling as the reason Call of Duty is not a shooting gallery for software. Kernel-level anti-cheat is a technical choice with a political aftertaste. It asks for deep access to a player’s machine in exchange for a cleaner lobby. Cheat makers answer with their own kernel-grade tools and a promise that those tools are safe. Elocarry’s storefront language made that promise explicit.
The Product on the Page
Elocarry had advertised a “RICOCHET-safe,” kernel-grade package for Black Ops 7 and Warzone. The feature list was the standard trinity of online sin: aimbot, ESP, and triggerbot. The price climbed as high as £79.99 per three months. That is not pocket money. It is a subscription to an advantage, priced like a premium battle pass and sold with the same casual confidence.
An aimbot steers the reticle. ESP, extrasensory perception in the old cheat jargon, draws enemies through walls. A triggerbot fires the instant a target crosses the crosshair, removing the last human delay. Together they turn a first-person shooter into a highlighting tool with a gun. Players have been complaining about that transformation for as long as Call of Duty has been a living service. The difference in 2026 is that the publisher is willing to make a one-minute movie about the complaint.
Calling a package “RICOCHET-safe” is a particular kind of dare. It does not only claim that the software works. It claims that the studio’s own shield does not. For a company that has invested its reputation in that shield, the phrase is not marketing. It is an insult with a price tag.
A Letter Is Not a Gavel
The clip’s language did some work that the paperwork did not. An “order” sounds like a judge. A cease-and-desist is a demand: stop, or we will make you stop. Companies send them every day, over trademarks, over leaks, over domain names that look a little too much like a logo. Most of them never become videos. Most of them never become this video, timestamped to the minute, shot on a residential street, uploaded to the official account of one of the most watched games on earth.
There is a reason lawyers like letters and marketers like porches. A letter creates a record. A porch creates a feeling. The feeling Activision wants is simple. Cheating is not a cat-and-mouse forum drama. It is a business, and the business has an address.
Ohio is a useful address for that feeling. It is not a shadowy hosting rack in a jurisdiction that ignores American civil complaints. It is a house. Houses have doors. Doors can be knocked on. The official account made sure the knock had a soundtrack.
Whether Elocarry’s operator was surprised is not in the public record, and inventing a reaction would be a kind of cheating of its own. What is in the record is what the vendor did next, which is the usual corporate half-step. It paused CoD and Warzone sales while “reviewing a matter internally.” The quotation marks are doing honest work. That is the language of a storefront that wants to look careful without looking finished.
The store is not finished. It still lists cheats for Rust, Apex, Battlefield 6, and Marvel Rivals. Those titles are not Activision’s problem in the same direct way, and the vendor appears to know it. A pause on Call of Duty and Warzone is a concession to the letter. A surviving catalog is a reminder that the cheat economy is a mall, not a stall. Kick one shopper out of one wing and the lights stay on in the others.
The Scale Activision Wants You to See
Activision’s own scoreboard is built for the same audience as the clip. The company says it has disrupted more than 375 reseller operations, served 80-plus cease-and-desist letters, and shut down 30-plus vendors, with lawsuits coming. Those are enforcement numbers, not player-experience numbers. They do not tell you how many lobbies felt clean on August 22. They tell you how many businesses the publisher claims to have shoved.
The gap between 375 reseller disruptions and 30-plus vendor shutdowns is the story of this market. Resellers are the storefronts, the Discord shops, the people who take a cut for handing you a login. Vendors are the authors. You can serve a lot of letters to a lot of middlemen and still have the same kernel driver circulating under a new name by the weekend. Shutdowns are harder. Lawsuits are harder still.
Activision has already shown it will go that far. A 2024 judgment hit EngineOwning for more than $14 million. That case is the precedent the new campaign wants players to remember. EngineOwning was not a meme account. It was a professional cheat operation, the kind that treated Call of Duty the way a software company treats a platform: updates, support, subscriptions, branding. A judgment that large is meant to change the math. £79.99 every three months looks different when the other side of the ledger has eight figures and a caption.
Money judgments do not, by themselves, delete a scene. They do raise the cost of staying visible. Visibility is how cheat vendors find customers. It is also how publishers find them. Elocarry was well-known. Well-known is a business strategy until the morning a process server is well-known too.
Why the Camera Is the Point
Anti-cheat used to be a quiet war. Developers shipped updates. Ban waves landed in the night. Forum threads filled with people swearing they were innocent and people swearing they were not. The public rarely saw a face, because the other side rarely had a face that could be safely shown.
The Ohio clip is the opposite theory. RICOCHET is not only a driver on your PC. It is a brand that needs proof of life. A live takedown, or a takedown staged to look live, gives the brand a body. The body is a process server. The setting is a house. The time is 9:50 a.m. The game in the background is a closed beta that hundreds of thousands of people are already treating as the real thing.
There is a risk in this theater, and it is not only legal. Demand letters can be overbroad. Cameras can turn a civil process into a pile-on. A vendor can be loathed and still be entitled to ordinary procedure. Activision’s clip does not linger on those cautions. It lingers on the handoff. Cheat makers operate around the world. So do we. The second sentence is the one the company paid the cameraman for.
Players, for their part, have been asking for this kind of aggression for years. Call of Duty on PC has lived with a reputation problem that no battle pass can paper over. Console players talk about input devices and recoil scripts. PC players talk about walls and rage cheaters and the particular despair of a ranked match that was over before the first gunfight. A publisher that only answers with “we banned X accounts this quarter” starts to sound like a weather report. A publisher that posts a porch starts to sound like a cop show. Cop shows rate.
The Catalog That Survived the Knock
Look again at what Elocarry did not pause. Rust is a survival game whose entire social contract is betrayal; cheats there are a second kind of betrayal, and they sell. Apex Legends is a battle royale with a movement cult and a cheating headache that has never quite gone away. Battlefield 6 is a large-scale shooter whose appeal is chaos; chaos is easier to fake with software. Marvel Rivals is a hero shooter in the long shadow of a genre that has spent a decade arguing about aim assist and aimbots as if they were cousins.
A store that can lose Call of Duty and Warzone and still look open is a store that understood diversification before the letter arrived. That is the uncomfortable professional fact underneath the morality play. Cheat vendors are not only trolls. They are small software businesses with product lines, price tiers, and a sense of which publisher is in a suing mood.
Activision is in a suing mood. The 80-plus C&Ds and the promise of lawsuits are the boring, necessary half of the campaign. The video is the other half. Together they say that the company will use every tool that fits in a press cycle: the kernel, the letter, the judgment, the clip.
October Is the Real Deadline
MW4 launches in October. Closed betas exist to find broken spawns and broken netcode. They also exist to find broken trust. If the cheat marketplace is advertising RICOCHET-safe tools before the box is on a shelf, the launch is already in a fight. Serving Elocarry on camera is Activision’s way of picking that fight in public, on a Saturday of the news cycle, with a timestamp that will be screenshotted for months.
Whether a demand letter changes a kernel driver is a technical question. Whether a one-minute clip changes a lobby is a cultural one. The company is betting that both answers can be yes if the letter is loud enough. It has the EngineOwning judgment in its pocket and a running tally of disrupted resellers. It has a vendor that paused the Call of Duty shelf and left the rest of the mall intact.
The players who watched the clip wanted a conviction. They got a porch. For a weekend, that may be enough. For October, it will not be. Call of Duty does not live or die on the quality of its cutscenes. It lives or dies on the feeling that the person who killed you was a person. RICOCHET’s job is to protect that feeling. The official account’s job, as of 9:50 a.m. on August 22, is to perform the protection so that everyone can see the knock.
Cheat makers do operate around the world. So do cameras. Activision has decided those two facts belong in the same frame. The letter on the porch is the legal instrument. The frame is the product. October will tell us which one the next vendor fears more.