Special Disclaimer: This article is an original work by Attorney Shao Shiwei. It reflects only the author’s personal views and does not constitute legal advice or a legal opinion on any specific matter. For article reprints, legal consultations, or business exchanges, please add: sswls66

  

In September 2023, the official Weibo account of the Yujiang Public Security Bureau announced that, with the assistance of Tencent’s Guardian Plan security team, it had successfully solved the first case in China involving the suspected illegal production and sale of “AI cheats” targeting shooter games such as Valorant. The amount involved exceeded RMB 30 million, and ten criminal suspects were arrested, including two authors of the “cheat” programs and eight agents.

On May 6, 2024, the People’s Court of Yujiang District, Yingtan City, Jiangxi Province, held a public first-instance trial and announced its judgment in this case. According to official reports [1], the defendant Wang Mouhe sought profit by producing and selling “AI cheats.” Up to the time of the incident, Wang Mouhe had illegally obtained profits totaling more than RMB 6.29 million. The court sentenced the principal offender, Wang Mouhe, to three years’ imprisonment with a five-year probation period for the crime of providing programs or tools for intruding into or illegally controlling computer information systems.

Since the incident occurred, online discussions about this case have continued unabated. It appears that, whether from a technical or a legal perspective, there is significant controversy over whether “AI cheats” constitute the crime of providing programs or tools for intruding into or illegally controlling computer information systems under the Criminal Law.

 

 Author of this article | Attorney Shao Shiwei

01

 

Case Background[2]

The core member of the group, Wang Mou, was only 26 years old and originally engaged in research and development in the field of artificial intelligence. In early 2021, he accidentally came across an explanatory video on a third-party video website introducing “AI cheats” for shooter games. Due to his professional sensitivity, he believed that if such AI cheats specifically designed for shooter games could be mass-produced and sold, they would generate substantial profits. He then collaborated with Zhang Mou, who could write cheat software. After completing the production of the “AI cheats” involved in the case, Wang began to recruit multi-level agents online to sell the products involved. By the time of the incident, the amount involved in Wang’s group had reached more than RMB 30 million.

 

02

 

What Are Game Cheats?

As early as December 2003, five departments, including the General Administration of Press and Publication, the Ministry of Information Industry, and the National Copyright Administration, issued the Notice on Launching Special Governance Against “Private Servers” and “Cheats,” cracking down on cheats.More than twenty years have passed since the issuance of this Notice, and the definition of “cheats” contained therein remains the only official definition to date.

However, the definition of unlawful conduct involving “cheats” in this Notice is quite vague and can be summarized as follows:Disruptionin another party's game workstechnical protection measures, and modifying work dataconduct.

 

"Private servers" and "game cheats" refer to unlawful acts that, without permission or authorization, circumvent the technical protection measures of legally published internet game works in which others hold copyright, modify work data, privately set up servers, produce game top-up cards (point cards), and operate or attach to the operation of legally published internet game works in which others hold copyright, thereby seeking profits and infringing upon the interests of others.

 

The gaming industry has undergone a sea change in its profit models, evolving from early standalone games to current online games. For standalone games that generate revenue through software sales, players' use of cheats after purchasing the software does not cause significant harm to the game publisher's interests. However, for online games, the publisher's interests are directly linked to players' online time and in-game items; thus, cheat technologies severely impact the publisher's interests.

 

According to the national standard GB/T 32413—2015 Prevention and Control of Cheats in Online Games, game cheats can be classified as follows (see figure below): keyboard simulation cheats, system acceleration cheats, memory and game packet protocol modification cheats, AFK (away from keyboard) farming cheats, offline-mode cheats, and other cheats.

 

03

 

What are "AI cheats"? Can they constitute the charges in this case?

1. What are the differences between "AI cheats" and traditional cheats?

 

In traditional game cheats, achieving cheating functions requires intruding into, monitoring, and tampering with key in-game data. This involves modifying game files and computer systems to disrupt game balance, enabling features such as wallhacks to predict enemy positions and aimbots for automatic targeting.

 

"AI cheats" do not rely on intrusion, monitoring, or tampering with in-game data, but instead simulate cheating behaviors as human operations. Specifically, the cheat first uses a video capture card to record the real-time output of the game screen and immediately transmits it to another computer. On this computer, a pre-trained object detection algorithm (YOLO) is used to perform rapid target detection.

Once target enemies are identified in the transmitted footage, the direction and distance for mouse movement are calculated directly. These data are then sent to the mouse input control device to perform automatic aiming, completing rapid shooting that exceeds normal human reaction speeds.

 

In summary, the process involves capturing the game screen, computing the resulting data, and finally having the AI input targets for shooting. Throughout this process, such assistance operates entirely outside the same program, and even on different hardware. It does not require modifying game files or installing additional plugins, nor does it rely on intrusion, monitoring, or tampering with in-game data. Therefore, "AI cheats" are difficult for game administrators to detect, naturally evading anti-cheat searches. Theoretically, they can be used in all FPS (First-Person Shooter) games, such as Call of Duty, CS:GO, PlayerUnknown's Battlegrounds, and Valorant.

 

2. Does an “AI cheat program” constitute the offense of “providing programs or tools for intruding into or illegally controlling computer information systems”?

 

As the name suggests, a prerequisite for constituting this offense is the “intrusion into or illegal control” of a computer information system. From a technical perspective:

“Intrusion”[3]Its manifestations include: using technical means to breach system protections to enter a computer information system; entering a computer information system without authorization from the victim; or entering a computer information system beyond the scope of authorization granted by the victim. In plainer terms, “intrusion” may involve, without the consent of others, employing technical means such as cracking passwords to breach, penetrate, bypass, or disable the security protection framework of a specific computer information system and thereby gain unauthorized access to that system. It may also involve the physical copying and replication of data, setting up counterfeit websites to deceive users into entering account numbers, passwords, and other information, or logging into a computer system with exceeded privileges. Furthermore, downloading data stored in a computer information system after intruding into it may be deemed the illegal acquisition of data from a computer information system.

 

“Illegal control”[4]This is primarily achieved through one-to-many distributed denial-of-service (DDoS) attacks against a target website, or by exhausting the system resources of the attacked network through service requests, thereby rendering the attacked network unable to process requests from legitimate users. This differs from the aforementioned patterns of intrusion and data acquisition; rather, it constitutes a higher degree of resource appropriation, resulting in the substantial deprivation of legitimate users’ control rights and even leading to exclusive use by the attacker.

  

According to the expert opinion in this case:

Programs such as “cvc” within the “AI cheat program” involved in the case obtained game screen data from multiple games without authorization, and modified mouse data instructions processed within the games without authorization, adding “auto-aim” and “auto-fire” functionalities, thereby interfering with the normal operating environment of the games and qualifying as destructive programs. The source code of the box program has the function of receiving mouse data instructions transmitted via the computer’s USB port, computing and parsing these instructions, and then sending the computation results back to the computer’s USB port, thereby achieving control over the automatic movement and clicking of the computer mouse cursor.

 

Attorney Shao believes that convicting the perpetrator based solely on this expert opinion may be somewhat tenuous:

 

1. Unauthorized acquisition of game screen data—Users do not need to obtain authorization to receive game screen data.

2. Unauthorized modification of mouse data instructions processed within the game—Users do not need to obtain authorization to invoke movement instructions from their own mice or hardware.

3. Addition of “auto-aim” and “auto-fire” functionalities within the game—In this case, no code was added to the game program itself; rather, an auto-click function was added to the user’s own mouse program. Regarding mouse macros, most major mouse manufacturers provide drivers that include macro settings. Mouse macros do not tamper with in-game data or inject code into memory. Although they may affect game fairness, they should not be characterized as “cheat programs.”

4. Disrupted the normal operating environment of the game—without compromising the game’s own codebase.

 

In principle, the “AI cheat software” at issue in this case is not a game cheat in the traditional sense; rather, it is a computer vision technology that operates entirely independently of the game. It does not modify the game’s memory or data. Instead, it continuously trains AI to recognize human-shaped contours on the screen and automatically moves the mouse smoothly within those contours, simulating genuine player input to achieve “auto-aim.” With sustained, long-term training on in-game visual scenes, the AI capabilities will continue to improve.

 

Online discussions among netizens regarding the technical aspects of this case are also noteworthy and can be briefly summarized as follows: although the “AI cheat software” did not tamper with game data, Tencent can still detect whether players are “cheating” by using such methods.

 

04

 

Concluding Remarks

If your conduct affects the fairness of the game and harms the interests of the game developer and operator—causing them to earn less or preventing them from earning revenue at all—then you are guilty.
—Excerpted from a game content creator’s views on AI cheat software technology

 

Attorney Shao believes that, from a jurisprudential perspective, there remains significant controversy over whether this case should be characterized as the crime of providing programs or tools for intruding into or illegally controlling computer information systems. However, if the concept of “cheat software” is broadly interpreted from the game publisher’s standpoint, it appears that any method that grants users an unfair advantage constitutes “cheat software,” regardless of whether AI technology is employed or whether the game’s internal data is actually intruded upon or tampered with. If Mr. Wang, the defendant in this case, had possessed a similarly “profound” understanding of the concept of “cheat software” as the aforementioned content creator, this litigation might have been avoided.

 

Although “no crime without explicit legal provision” is a fundamental principle, statutory law inevitably cannot comprehensively regulate rapidly evolving business models. In adjudicating this case, greater emphasis was placed on social effects: although the “AI cheat software” in this case differs substantially from game cheats addressed in prior decisions, it objectively harmed the interests of the game publisher and affected the fairness of the game.

 

This case also serves as a warning to merchants selling such “cheat software”; relevant practitioners should carefully consider the consequences before proceeding. Nevertheless, a casual search on Taobao still reveals numerous stores selling such software. It is likely that, while preoccupied with generating profits, these operators have little time to contemplate legal risks.

 

This reminds Attorney Shao of a remark once made by Changpeng Zhao, founder of Binance: “It is easier to ask for forgiveness than for permission,” which is an intriguing statement.


[1] The first case of its kind nationwide! Yujiang Court publicly announces judgment! https://mp.weixin.qq.com/s/N3Qxv1hS_R70auyBzOxz9Q

[2] [News Live Broadcast] The nation’s first “AI game cheat software” case http://tv.cctv.com/2023/11/27/VIDEa5p5vvMTNz7h5YmlDqiU231127.shtml

[3] Notice of the Supreme People’s Procuratorate on Issuing the Ninth Batch of Guiding Cases of the Supreme People’s Procuratorate, Case No. 36: Wei Menglong, Gong Xu, and Xue Dongdong – Case of Illegally Obtaining Data from Computer Information Systems

[4] “Understanding and Application of the Supreme People’s Court’s Interpretation on Several Issues Concerning the Application of Law in the Handling of Criminal Cases Endangering the Security of Computer Information Systems,” published in Issue No. 19, 2011 of People’s Justice (Application)

 

Recommended Reading

Discussion Thread | Is It Illegal to Publish R18 Games on Steam?
Top 10 Legal Issues Web3 Game Entrepreneurs Should Pay Closest Attention To
Latest Lawyer’s Analysis | Measures for the Administration of Online Games (Draft for Comment)
Love Is All Around! Goes Viral and Launches on Steam: What Are the Legal Risks?
Legal Risks of Mining in Blockchain Games: New Coin Mining
Gambling Involvement in Online Live-Streaming Activities: Do Streamers, Streaming Guilds, and Live-Streaming Platforms Suspect of Committing the Crime of Operating a Casino? Key Points for Criminal Defense