Marvel Rivals Cheats — The Complete 2026 Guide

The product. NetEase ships its own in-house kernel-mode anti-cheat across its game lineup. The community references it as NeacSafe (the driver file name is NeacSafe64.sys) or NEP (for NetEase Enterprise Protection — the internal codename glimpsed in user-mode component NEP_Usermode.dll). Some NetEase support documentation calls it NetEase Game Security. The names are interchangeable; the product is one thing.

The technical profile (from 0x90.sh's June 2025 driver analysis). The driver is closed-source. Packed with VMProtect 2.x/3.x (commercial code-obfuscation product), making static analysis significantly harder than open-source kernel ACs like EAC. The driver loads via %TEMP% at game start, then deletes its on-disk copy after kernel load — so a forensic snapshot of the disk doesn't reveal the driver was present. No DriverUnload routine. No kernel-to-user heartbeat. Both of these are unusual design choices that make the driver harder to surgically remove with custom-driver-unlinking techniques.

What NeacSafe reads for HWID fingerprinting. Per the 0x90.sh analysis and corroborating community RE work: SMBIOS UUID + serial + manufacturer + product (standard), motherboard serial, all disk serials (SATA + NVMe), MAC addresses, GPU device UUID, RAM module IDs (when readable from SMBIOS Type 17), MachineGuid, BIOS version. Composite hash sent to NetEase's identification server. Plus: the hash is shared across all NetEase games — Naraka: Bladepoint, Identity V, Once Human, Marvel Rivals — so a hardware fingerprint flagged in one game prevents play in all of them.

What NeacSafe does NOT do (and what some marketing wrongly claims). It is not EAC. It is not BattlEye. It is not co-developed with Microsoft. Despite Steam community privacy complaints calling it a "rootkit," it operates as a standard ring-0 kernel driver — same architectural pattern as Vanguard, EAC, BattlEye, and other commercial kernel ACs. The "rootkit" framing is rhetorical, not technical. Worth flagging because privacy-conscious users sometimes refuse to install Marvel Rivals citing "Chinese kernel-level anti-cheat" without understanding it's the same kind of software they're already running for any major FPS.

The buyer implication. A Marvel Rivals cheat vendor that confidently describes their bypass as "EAC bypass" is either marketing copy from someone who didn't research or is repurposing EAC-tuned code for a different AC entirely. Look for vendors who name NeacSafe specifically and describe their bypass in terms of the actual driver behavior (VMProtect-handled, no-heartbeat, etc.). Raw Rivals is built specifically around NeacSafe's behavior, not generic kernel-AC techniques.

The mechanic. NetEase runs a centralized hardware-identity service across its game lineup. When NeacSafe detects a cheat in Marvel Rivals (or in Naraka, or in Identity V, or in Once Human), the user's hardware fingerprint goes into a shared ban table. Every NetEase game's launcher checks the table at session start; a hit blocks the launch. The cluster on Marvel Rivals HWID spoofer + cross-game ban walks through the technical details.

The implication. If you only play Marvel Rivals and you eat a ban, you lose that game. Fine. If you also play Naraka: Bladepoint or Identity V or Once Human on the same machine — and a significant chunk of NetEase players do, because NetEase cross-promotes its catalog inside each launcher — you lose those too. The cumulative cost of a cross-NetEase ban often exceeds the cumulative cost of a Steam library ban for non-NetEase games because the NetEase portfolio has substantial cosmetic / event-pass investment per title.

The spoofer requirement. Standard advice for Marvel Rivals cheating is "don't use cheats without a HWID spoofer first." The standard advice is correct but understated. The actual requirement is: a hardware fingerprint that survives NeacSafe's specific read profile AND is randomized across each session AND covers all 16 identifier categories. Raw Spoofer is built to that spec — the deeper HWID Spoofer pillar covers the per-AC fingerprint matrix.

The hardware-swap-doesn't-help corollary. Cross-NetEase bans persist across motherboard swaps for the same reason any HWID ban does — NeacSafe reads 12+ identifiers and composites them. Swapping motherboard alone shifts a subset, doesn't reset the composite. If you've eaten a cross-NetEase ban and you want all four games back, the only economic path is a spoofer.

Devil Dinosaur as the 50th hero (S8 launch, May 15, 2026). Likely Vanguard class (per leaked datamine entries from marvelrivals.gg and Insider Gaming). New hitbox profile means aimbot vendors need to update bone-priority math for Devil Dinosaur specifically — the hero is significantly larger than average, which means head-target prioritization needs different angular thresholds. ESP needs to handle the new model's bounding box.

Cyclops drops with S8.5 mid-season. Hitscan DPS hero (datamine). Per-hero aim profiles benefit from Cyclops-specific tuning — energy rifle hitscan plus the Dorothy drone secondary mechanic. Aimbot profiles tuned for hitscan duelists generally work for Cyclops out of the box.

New maps. Alchemax HQ with the Chronovium kinetic-force mechanic. Leaks reference Savage Land, Kunlun – Shenlong Tournament, Hydra Base – Maveth. New maps mean new ESP world-object classes (the Chronovium kinetic-force objects specifically), new line-of-sight geometry, new aim engagement distances. Most providers update map-specific tuning within days of patch.

New Kill FX visual layer. Cheat ESP rendering may interfere with the new visual layer in unpredictable ways; expect cosmetic glitches in the first 24-48 hours after S8 launch.

Patch-day cheat status protocol. When a major content patch lands in Marvel Rivals, the expected sequence is: (1) patch goes live ~9am PT, (2) cheat detection systems behave erratically for the first ~6 hours as game state schemas change, (3) cheat operators ship a patched build within 6-12 hours of patch landing, (4) status flips back to UNDETECTED. The Marvel Rivals cheat status page tracks live status across patches.

Don't play between patch land and status confirmation. Running an outdated cheat against a patched game produces inconsistent state reads (the cheat is querying memory offsets that have shifted), which NeacSafe's behavioral telemetry detects as anomalous. The single highest-risk Marvel Rivals session of any month is the 6-hour window after a content patch lands. Wait for status confirmation.

Role-aware aim assist. Marvel Rivals is a hero shooter with three roles — Duelist (DPS), Vanguard (tank), Strategist (support). Each role has different hitbox profiles, different optimal aim targets, and different engagement distances. A serious aimbot lets you configure per-role behavior: Duelist sub-config tuned for hitscan (Hela, Punisher, Hawkeye) vs projectile (Squirrel Girl, Moon Knight, Hawkeye arrows); Vanguard sub-config with sticky aim for the huge hitbox heroes (Hulk, Magneto, Thor); Strategist sub-config with defensive triggers (Mantis, Luna Snow, Jeff the Land Shark, Cloak & Dagger). Raw Rivals ships a Role Filter (Duelists / Vanguards / Strategists) as toggles plus a 4-slot hitbox priority picker (Head / Chest / Arms / Legs draggable order).

Player ESP with the Marvel Rivals-specific widgets. Player boxes (configurable styles), skeletons, names, distance, health bars, and the genre-defining widget: Ultimate Charge tracker. Knowing the exact percentage of enemy ult charge is the single most-valuable hero-shooter ESP feature — it tells you when to push, when to bait, and when to disengage. The configurable preview pane in the menu animates these toggles live on a rotating character so you can see what your ESP will look like before queuing.

Hero Name labels and Role identification. Beyond just enemy positions, the cheat surfaces who each enemy is (hero name + role indicator), which lets you instantly read whether the team you're facing has hard counters to your composition.

Hit-chance silent aim. Same Silent Aim semantics as the Fortnite pillar — fires the shot at a target inside your engagement window while leaving the visible crosshair off-target. Hit-chance slider for plausible deniability. Use cautiously; not a marquee setting.

Aimbot timing for projectile prediction. Hela's skull projectiles, Hawkeye's arrows, Squirrel Girl's acorns, Moon Knight's ankhs — every projectile hero has a specific projectile speed and gravity curve. A good Marvel Rivals aimbot auto-prediction handles per-hero ballistics without manual tuning.

HWID spoofer is non-optional for Marvel Rivals. The cross-NetEase ban risk is too high to play un-spoofed. Raw Spoofer handles the 16 identifier categories NeacSafe checks — see the HWID Spoofer pillar for the full per-AC fingerprint matrix.

What doesn't survive 2026 Marvel Rivals. Free cheats from GitHub / Discord servers (Lumma / Vidar 2.0 payloads — the standard infostealer trap). Generic FPS aimbots without role-aware tuning. Cheats marketing "EAC bypass for Marvel Rivals" (they're either lying or shipping wrong code). DMA hardware is technically possible but the cost-of-ownership math at $500+ in hardware vs $4.99-$15/month in software is poor for Marvel Rivals specifically.

August 2024 (Closed Beta). NetEase banned 190 accounts during closed beta and published their names + account IDs on marvelrivals.com — an unusually aggressive name-and-shame policy that signaled NetEase's enforcement posture pre-launch. The original announcement is documented at marvelrivals.com/announcements/20240815.

December 6, 2024 — Launch. Cheaters appeared within the first weekend of launch per Sportskeeda and GameRant coverage. NetEase had been preparing for this — the closed-beta name-and-shame established the precedent of public enforcement at scale.

January 2025 — macOS / Steam Deck false-positive wave. NetEase's NeacSafe loaded under Wine / Proton (Steam Deck and macOS) and produced false-positive bans for legitimate cross-platform players. NetEase publicly apologized via GamesRadar and Push Square coverage and reversed the bans. The episode is significant because it demonstrated that NetEase will adjudicate cases (rare in the AC industry) and because it highlighted a persistent risk for Linux / macOS players using Marvel Rivals via Proton.

Q1 2025 onward — Continuous detect-and-terminate model. NetEase shifted to per-match cheater detection with match invalidation (the other 11 players in the match keep their MMR; the cheater's data is purged). The pattern continues through 2025-2026. Per CBR coverage and Dexerto reports.

Industry data point (unverified). Some industry analyst pieces claim 1.2M+ total bans in Marvel Rivals' first year. Primary-source verification is not available; we mark this as approximate. Compare to verified counts: Fortnite's 2025 had ~70K in one wave alone, Rust had 296K perm bans annual. 1.2M for Marvel Rivals first year is plausible but unconfirmed.

March 5, 2026 — Incentivized Throwing crackdown. NetEase's official statement on third-party bounty sites paying players $10-$40 to throw matches against streamers. Permanent ban policy introduced. The lower reporting threshold for AFK / throw behaviors expanded NetEase's behavioral pipeline. Source: marvelrivals.com/announcements/20260306.

Q1-Q2 2026 — "Lord farming" combat-behavior detection. NeacSafe rolled out an additional combat-behavior detection system targeting proficiency-AFK exploits (where players ran scripted Lord-rank farming for cosmetic / progression rewards). Warning → short-term ban → long-term ban → permanent escalation tiers. Affects cosmetic / proficiency farming, not cheating per se, but expands NetEase's behavioral telemetry pipeline.

No season-end ban wave pattern. Unlike Blizzard (Overwatch Defense Matrix posts) or Krafton (PUBG Weekly Bans Notice), NetEase does not publish season-end batched ban-wave numbers for Marvel Rivals. The continuous detect-and-terminate model means waves don't bunch into Thursdays or season-end. Detection happens roughly continuously.

The cluster Marvel Rivals ban wave history expands each entry with primary-source links.

Where the free cheats live. GitHub repos are heavily indexed but Discord servers dedicated to "Free Marvel Rivals Cheats" are the bigger 2026 distribution channel. The Discord servers post a Mediafire / MEGA link, the user downloads what's labeled as a cheat installer, and the installer drops Lumma / Vidar 2.0 / StealC. Same payload family as every other game's free-cheat economy; same exfiltration of Steam tokens, browser-saved passwords, Discord tokens, and crypto wallet keys. The Acronis TRU analysis on Vidar 2.0 covers the technical details.

Why younger demographics get hit harder. Marvel Rivals' player base skews younger than Rust / Fortnite (probably). Younger users are more likely to have saved Discord / Steam credentials in their browser and less likely to have hardware-2FA on crypto wallets. The expected loss per Vidar infection on a Marvel Rivals "free cheat" buyer often exceeds the expected loss on a Rust free-cheat buyer because the credential surface is less defended.

Detection time on free Marvel Rivals cheats is very short. NeacSafe + NetEase's continuous detection model catches public free cheats within hours of launch. The Steam community discussion threads document the pattern: "got banned in 4 hours," "banned after first match," "my friend lost his entire cosmetic collection."

Paid Marvel Rivals cheats start at $3.99/day or $20-something/month depending on tier (we don't price-fix; Raw Rivals pricing is on the product page). The economic argument is the same as every other pillar: the expected-loss math against a Lumma infection favors paid by orders of magnitude.

Test 1 — Do they name NeacSafe, not EAC? This is the editorial-credibility wedge. A vendor that says "bypasses EAC for Marvel Rivals" hasn't done their research. Look for explicit NeacSafe references. Bonus points for naming the VMProtect-handled driver design.

Test 2 — Cross-NetEase HWID ban acknowledgment. Does the vendor warn you that a Marvel Rivals ban affects Naraka / Identity V / Once Human on the same hardware? If they're silent on this, they're hiding risk.

Test 3 — Role-aware aim assist? Generic FPS aimbots fail on hero shooter hitboxes. Look for explicit Duelist / Vanguard / Strategist role tuning OR per-hero configuration.

Test 4 — Ultimate Charge tracker? This is the hero-shooter-defining ESP feature. A Marvel Rivals cheat without ult tracking is a 60% product.

Test 5 — Season 8 readiness. S8 launches May 15, 2026 with Devil Dinosaur as the 50th hero. A vendor whose roadmap doesn't mention S8 preparation is shipping you a product that won't work on launch day.

Test 6 — Trustpilot footprint without infostealer-symptom reports. Same test as every pillar; search for "Steam compromised" / "wallet emptied" / "Discord hijacked" in their reviews.

Test 7 — Refund / warranty policy in writing. Specific terms for spoofer downtime and AC-patching downtime.

Raw Rivals vs Battlelog vs elitepvpers providers runs these tests on the major 2026 Marvel Rivals vendors.

Everything is in-house. Raw Rivals is written and maintained by our own team — same shared SDK, same offset pipeline, same support staff that ships Raw Fortnite, Raw Rust, Raw Arc Raiders, Raw Overwatch, and Raw PUBG. Marvel Rivals is the newest game in our lineup (we shipped Raw Rivals close to game launch) and the first-mover advantage on the NeacSafe-specific bypass research has held throughout 2025-2026.

External cheat (not internal/injected). Raw Rivals runs as its own process — doesn't inject into Marvel Rivals' runtime. External design is meaningfully harder for NeacSafe's kernel scanner to detect because the AC's signature reads can't sweep memory regions it doesn't own. Combined with our specific tuning for NeacSafe's VMProtect-handled driver behavior, this is what's let our detection windows hold across NetEase's continuous detection model.

No DMA required, no UEFI writes. Pure software. Single machine, single download, single license.

Shared SDK across six products = simultaneous improvement. When we improve memory-residue ESP, role-aware aim assist, or HWID-friendly driver hooks in shared code, Raw Rivals gets it on the next build alongside every other product. The recent menu and infrastructure overhaul that landed across the lineup brought Raw Rivals into parity with the rest of the family.

Marvel Rivals-specific features done right. Role Filter (Duelists / Vanguards / Strategists) as toggles, 4-slot hitbox priority picker (Head / Chest / Arms / Legs draggable), Player ESP with the Ultimate Charge widget that defines hero-shooter cheating, Hero Name + Role identification labels, per-hero projectile prediction (Hela's skulls, Hawkeye's arrows, Squirrel Girl's acorns, Moon Knight's ankhs handled correctly out of the box).

The animated preview pane. A small UX touch: when you toggle ESP options in the menu, a 3D character renders the current settings live before you queue. Box style, skeleton, hero name, distance, health bar, ultimate charge — all visible on the preview model rotating in the menu. This is a shared-SDK feature that you can see across all six Raw products.

Cross-version + cross-vendor compatibility. Windows 10 + Windows 11. Intel + AMD CPUs. Intel, AMD, NVIDIA GPUs. Full compatibility matrix on the product page.

Continuously evolving bypass infrastructure. Multi-layered design. We treat our NeacSafe bypass as a moving target — when NetEase ships a NeacSafe driver update (rarely with announcement; usually silently), we ship a tuned Raw Rivals build within 6-12 hours. Status posts on the forum and Discord.

HWID spoofer companion essential for Marvel Rivals specifically. Raw Spoofer is $4.99 add-on. Cross-NetEase ban risk makes this mandatory, not optional.

What happened in January 2025. NetEase's NeacSafe driver loaded under Wine / Proton (the compatibility layer Steam Deck uses to run Windows games on Linux, also used by macOS users running Marvel Rivals through Crossover or similar). The driver's behavior under Proton produced false-positive bans for legitimate cross-platform players. NetEase publicly apologized via GamesRadar and Push Square coverage, reversed the bans, and adjusted the driver to recognize Proton-loaded sessions as non-bannable false positives.

The persistent risk for Linux / macOS players. Even with the Jan 2025 fix, Marvel Rivals is genuinely harder for non-Windows players to use safely. NeacSafe's behavior under Proton is occasionally inconsistent. Cheats designed for native Windows behavior may not function correctly under Proton because the kernel driver layer is mediated by Steam's Proton runtime.

Raw Rivals is Windows-only. We don't support Steam Deck / macOS / Proton-based usage. Our driver is signed for Windows kernel-mode and our cheat assumes native Windows session state. If you're playing Marvel Rivals through Proton, the safest path is to not use a cheat at all rather than risk the inconsistent behavior. (We're transparent about this rather than claiming false multi-platform support.)

Crossplay implications. Marvel Rivals is cross-play (PC + PS5 + Xbox). Console players are NOT a market for Marvel Rivals cheats — NetEase has no kernel-AC on consoles, but the cheat market is software-only on PC. Console crossplay does expose console players to PC cheaters, which is part of why the in-game reporting system has been ramped up.

Step 1. Buy Raw Rivals subscription + Raw Spoofer add-on. Cross-NetEase ban risk makes the spoofer non-optional.

Step 2. Cold-boot Windows. Don't open Steam yet.

Step 3. Run Raw Spoofer as administrator. Enter spoofer license. Identifiers randomize for the session.

Step 4. Launch the Raw Rivals loader. Enter cheat license. Select Marvel Rivals from the game dropdown.

Step 5. Launch Marvel Rivals through Steam. When you reach the main menu, click "Inject" in the loader. The cheat menu overlays within 2-3 seconds (default keybind: INSERT).

Step 6. Configure. Role Filter (Duelists / Vanguards / Strategists checkboxes), hitbox priority order, FOV, smoothness, visible-only filter. Visuals → Players: Box, Skeleton, Hero Name, Distance, Health Bar, Ultimate Charge toggles. Save to a config slot. The deeper Marvel Rivals aimbot settings cluster walks through role-specific tuning recommendations.

Step 7 (Marvel Rivals specific). If a patch lands during your session — content patch or NeacSafe driver update — close the game immediately. Don't continue playing on an outdated cheat against patched server state. Wait for status to flip back to UNDETECTED before re-queuing. Status posts on the Marvel Rivals cheat status page and Discord.

Discord support 24/7 at discord.gg/rawcheats.