Call of Duty RICOCHET Anti-Cheat Explained: How it Works In Black Ops 7
Call of Duty’s RICOCHET Anti-Cheat has been the backbone of the franchise’s security since its debut in 2021. And now, with Black Ops 7’s release, Activision is rolling out even more updates and backend improvements to combat evolving cheat software. But how exactly are they leading the good fight?
In this guide, we break down how the Call of Duty RICOCHET Anti-Cheat system works in Black Ops 7, all the changes coming to BO7 Multiplayer and Warzone, and the real-time strategies the developers are using to suss out cheaters.

Image source: Activision / Call of Duty
- 1. What Is RICOCHET Anti-Cheat In Black Ops 7?
- 2. How Does RICOCHET Detect Cheaters In Black Ops 7?
- 3. What’s New in RICOCHET for Black Ops 7 and Warzone?
- Smarter Aimbot & Wallhack Detection
- 4. Black Ops 7 RICOCHET Mitigation Mechanics Explained
- 5. RICOCHET TPM 2.0 And Secure Boot Requirements
- Remote Attestation Explained
- 6. FAQs
What Is RICOCHET Anti-Cheat In Black Ops 7?
RICOCHET is Call of Duty’s proprietary in-house anti-cheat solution for combating cheaters and hackers across the franchise’s titles, including Black Ops 7. It was launched in November 2021, coinciding with the release of Vanguard Season 1 and the debut of Warzone Caldera.
The system uses a multi-pronged approach, including a kernel-level driver to detect and prevent cheating, while also enhancing player account security. The driver runs only when CoD is active, monitoring programs in real time to detect and block any attempts to manipulate the game.
How Does RICOCHET Detect Cheaters In Black Ops 7?
Call of Duty’s RICOCHET Anti-Cheat system uses both server-side and client-side tools to find cheaters in Black Ops 7. It relies on advanced machine learning algorithms that study gameplay data to detect unusual behavior patterns and stop them from happening again.
RICOCHET’s kernel-level driver monitors applications running on a player’s PC while Call of Duty is active, ensuring no unauthorized programs interfere with gameplay. Additionally, the system includes third-party hardware detection, blocking external devices like Cronus to gain an unfair in-game advantage.
Black Ops 7’s Anti-Cheat also includes a review system that moves flagged players into special lobbies with higher latency and longer queue times. This ensures that flagged players are matched with others in similar conditions and preserves the fairness and integrity of matches.

Image source: Activision / Call of Duty
What’s New in RICOCHET for Black Ops 7 and Warzone?
In an ongoing effort to improve the system, RICOCHET includes significant updates for Black Ops 7 and Warzone, including a new generation of machine learning models and detection tools. The updates are based on compiled information and gameplay analysis from Black Ops 6’s lifecycle.
Smarter Aimbot & Wallhack Detection
Key upgrades include smarter aimbot detection to better distinguish between natural player behavior and cheating patterns. Wallhack detection has also been integrated directly into the system’s backend, allowing faster and more accurate identification of cheaters attempting to see enemies through surfaces.
Beyond that, Black Ops 7’s RICOCHET Anti-Cheat update introduces a new layered defense approach. This includes multiple detection methods that overlap and work together to strengthen and reinforce the overall system.
This update builds on existing real-time mitigations like cloaking, disarming, and damage shields, which disrupt cheaters’ gameplay and stop them from affecting legitimate players. These protections now extend across BO7 and Warzone to reduce repeated encounters with banned players.

Image source: Activision / Call of Duty
Black Ops 7 RICOCHET Mitigation Mechanics Explained
To fight cheating in Black Ops 7 and Warzone, RICOCHET uses real-time anti-cheat mitigation tools that act immediately instead of waiting for bans. These measures disrupt the gameplay of players suspected of cheating while protecting legitimate players from their effects.
Currently, RICOCHET includes the following countermeasures:
- Cloaking: Makes legitimate players invisible to detected cheaters.
- Disarm: Removes weapons and equipment from cheaters during gameplay.
- Damage Shield: Grants legitimate players complete protection from cheaters’ damage.
The player reporting system also allows users to flag suspected cheaters instantly. These reports assist RICOCHET’s automated detection systems in monitoring suspicious behavior. Once confirmed, cheaters are moved into limited matchmaking away from the regular player pool.
RICOCHET TPM 2.0 And Secure Boot Requirements
With the launch of Black Ops 7, Activision requires PC players to have CoD’s TPM 2.0 and Secure Boot enabled to access the game. These features, also available during the BO7 Open Beta, enhance game integrity by providing hardware-based security and ensuring that only trusted software loads during startup.
Remote Attestation Explained
Starting with BO7, Call of Duty will introduce a new layer of protection called Remote Attestation. This cloud-based verification system securely validates TPM 2.0 and Secure Boot settings via Microsoft Azure servers.
Call of Duty’s Remote Attestation is more rigorous than client or local methods, enabling servers to verify PCs using TPM hardware-signed cryptographic proofs. If the server confirms legitimacy, the player can access the game normally. If not, they’ll be blocked or their account flagged.
Together, TPM 2.0, Secure Boot, and RICOCHET Anti-Cheat deliver the most advanced tools to combat cheating in any Call of Duty game.

Image source: Activision / Call of Duty
FAQs
Is RICOCHET active in all Call of Duty titles?
No. RICOCHET Anti-Cheat isn’t active in all Call of Duty titles. It’s only available in Vanguard, Warzone, Modern Warfare 2 (2022), Modern Warfare 3 (2023), Black Ops 6, Black Ops 7, and subsequent titles.
What’s new in RICOCHET Anti-Cheat for Black Ops 7?
Call of Duty: Black Ops 7 upgrades the RICOCHET Anti-Cheat with faster aimbot and wallhack detection, TPM 2.0 and Secure Boot for hardware validation, and a unified layered defense that boosts cheat detection accuracy and system resilience.
Do I need TPM 2.0 and Secure Boot to play Black Ops 7?
Yes. TPM 2.0 and Secure Boot are mandatory for all PC players who want to play Black Ops 7 or Warzone. If you don’t have them, you won’t be able to access the games.
Will bans from other CoD titles carry over to Black Ops 7?
Yes. Activision account bans carry over between games, as they’re all interconnected. If you’ve been banned from a CoD title before Black Ops 7, that account won’t be able to access the game.