Cheating

Not to be confused with Cheats, which are console commands that need sv_cheats 1 to work.

Material wallhacking on 2Fort.

Material wallhacking on 2Fort.

Cheater using ESP on Dustbowl.

“

Nothing stokes my ire like a cheater. Deception, duplicity, murder — these are merely tools in a toolbox one can use to ensure a job done well. But cheating? I cannot even wrap my head around the point of it. Wouldn't you know you had cheated? How on Earth could you maintain crisp certainty of your superiority to all others? And if you're unable to do that, what's the point of anything? — The Administrator

”

Cheating is a term that describes the use of third-party programs or material changes in order to gain an unfair advantage in gameplay.

Valve has a strict policy against cheating and will ban detected cheats with the Valve Anti-Cheat system, also known as VAC.

Players can be reported in game via the scoreboard or by pressing ESC and clicking the Report Player button on the main menu, or by sending an abuse report (default key: F7).

Most cheats take the form of:

• Engine hooks, which "hook" parts of the Source Engine and use them for their cheat.

Ex: CreateMove, PaintTraverse, DrawModelExecute...

• Material cheats (chams, short for chameleon skins), use custom materials to lower the opacity of walls or make players easier to see.

These cheats are referred to as "internal cheats".

"External cheats" also exist. They do not "hook" but instead read/write game memory externally. These are fairly uncommon in Team Fortress 2.

Working Cheats

These are features in cheats that work in the latest version of Team Fortress 2.

Achievement Unlocker

Some community-hosted servers have a plugin which unlock all achievements in-game with a special command, granting all corresponding achievement items. This can also be achieved by using third-party software.

Aimbot

Automatically aim at an enemy for the player. This can be customized to ignore Spy's cloak, disguise, or Medic's Vaccinator and have "legit" features (features which attempt to disguise cheating behavior) such as smoothing.

There are multiple variants of this, which include Hitscan Aimbot, Melee Aimbot, and Projectile Aimbot.

• Hitscan Aimbot includes the following sub-variants, sorted from Rage to Legit:
  • Aimbot: Allows the crosshair to lock onto the enemy.
  • Silent Aim: Allows for firing the weapon at the target without facing the target; however, flicking or locking is visible to spectators.
    • Before the July 23, 2015 Patch, pSilent Aim allowed for firing in one direction without facing it. After the patch, players attempting to use pSilent Aim will appear to flick to a spot in one frame, then flick back to the original spot the crosshair was on.
    • Some cheats will attempt to suppress the flicking by simply moving the location of the crosshair onto the enemy in order to prevent the 'flicking' that certain silent aimbots have.
  • Smooth Aim: Similar to Aimbot; however, smoothing is applied when locking onto enemies in order to prevent the sudden flicks that Aimbot creates.
  • Aim Assist: Helps move your crosshair to your target, but autofire is disabled.

• Melee Aimbot includes the following sub-variants, sorted from Rage to Legit:
  • Melee Aim: Locks your crosshair onto the enemy and attacks.
    • Melee Swing Prediction: Predicts where the target will be after the swing delay.
  • Silent Melee Aim: Silent Melee Aim allows for swinging your melee without facing the target; however, spectators will see you flicking or locking onto the target.
  • Smooth Melee Aim: Similar to Melee Aim; however, this applies smoothing when locking onto a target.
  • Melee Aim Assist: Helps move the crosshair to your target, but autofire is disabled.
  • pSilent Melee Aim: Unlike Silent Melee Aim, pSilent Melee Aim allows for swinging your melee without facing the target with no visible flicking.
  • (Spy only) Auto Backstab: Backstabs the instant the back hitbox is hittable. Your viewmodel also silently changes angle depending on the target's location in order to be able to execute a backstab.

• Projectile Aimbot includes the following sub-variants, sorted from Rage to Legit:
  • Projectile Aim: Locks onto the predicted location of the target and fires.
  • Silent Projectile Aim: Silent Projectile Aim allows for firing your weapon at a target without facing the target; however, spectators will see you flicking or locking onto the target.
    • However, some cheats will just move the location of the crosshair onto the enemy in order to prevent the 'flicking' that certain silent aimbots have.
  • Smooth Projectile Aim: Similar to Projectile Aim; however, smoothing is applied when locking onto enemies in order to prevent the sudden flicks that Projectile Aim creates.
  • Projectile Aim Assist: Draws a dot where the predicted position of the enemy will be when you fire at that location. Also helps move your crosshair to your target, but autofire is disabled.
  • pSilent Projectile Aim: Unlike Silent Projectile Aim, pSilent Projectile Aim allows for firing your weapon at a target without facing it, with no visible flicking.

• TriggerBot: There are multiple sub-variants of this, which include:
  • • Hitscan Triggerbot: Fires whenever an enemy is under your crosshair.
    • Melee TriggerBot: Swings your melee weapon when a target is under your crosshair and in range.
    • (Pyro only) Auto Airblast: There are multiple sub-variants of this, which include:
      • Rage Auto Deflect: Automatically deflects projectiles towards targets without facing them.
      • Legit Auto Deflect: Automatically deflects projectiles towards targets when projectile is in view.
      • Auto Extinguish: Automatically extinguishes teammates in range.
      • Auto Push Enemies: Automatically pushes enemies away.
    • (Pyro only) Auto Detonate Flares: Automatically detonates flares that are in range of targets.
    • (Demoman only) Auto Detonate Sticky: Automatically detonates stickybombs that are in range of targets.
    • (Medic only) Auto Über: Automatically activates ÜberCharge upon you and/or your patient taking damage.
    • (Medic only) Auto Kritz: Automatically activates Kritzkrieg ÜberCharge under certain situations.
    • (Medic only) Auto Vaccinator: Automatically switches the Vaccinator resistance mode and activates ÜberCharge depending on the damage type you and/or your patient are taking.
    • (Spy only) Auto Sapper: Automatically places Sappers on buildings in range.

Anti-Autobalance

Some cheats disconnect and reconnect the player to the server in order to bypass autobalance.

Anti-Aim

Anti-aim is to constantly change the viewmodel to prevent being headshot. This is sometimes done by modifying the view angles of the player by editing the values in pitch or yaw (roll has been patched in later Source Engine versions) into an out-of-bound value, so the viewmodel can appear facing one direction, when in reality the real hitbox is facing the other direction. This is often called "fake angle".

A limitation of Anti-Aim is that the visual hitbox cannot be facing away from the direction of fire, i.e. when the cheater fires forwards, the visual viewmodel snaps forwards.

• Anti-Backstab is also achieved with Anti-Aim. It detects if a Spy is near your back hitbox and snaps the real viewmodel backwards, making the Spy miss their stab.
  • However, if the Spy is using backtrack, the Spy can backstab a previous tick sent by the cheater in order to backstab the cheater.

Anti-Anti-Aim

Anti-Anti-Aim, or Aim Resolver, attempts to brute-force the enemy's real viewmodel by shooting at certain locations until a headshot is made.
Certain cheats can also "force" an enemy cheater's viewangles, so that they may manually resolve their anti-aim.

Autostrafer

Autostrafing, or auto airstrafing, can refer to 3 things. Legit Autostrafe, Rage Autostrafe, and Directional Autostrafe.

• Legit Autostrafe: Legit Autostrafe helps your client automatically airstrafe left or right when your mouse moves left or right.
• Rage Autostrafe: Rage Autostrafe allows for optimal airstrafes in the direction you are facing. This is perfectly silent from the client, server, or spectator.
• Directional Autostrafe: Directional autostrafe allows you to press movement keys (WASD) to move in directions you are not facing, allowing for much different movement compared to legit and rage autostrafe.

This is only active in conjunction with Bunnyhopping, as simply strafing left and right on the floor will no longer give you a speed boost due to the speed cap that has been added from the release of the Source Engine.

Backtrack

Abuses the Source Engine's lag compensation to "send people back in time". Cheats can backtrack up to 200 milliseconds, or ~13 ticks on 66 tick servers. Signs of cheaters using backtrack are when a player is killed after walking behind cover; however, this may be due to latency issues.

If a player or bot is holding the Intelligence / Mann vs. Machine bomb and they get backtracked, the Intelligence (or bomb) gets teleported to the position they were backtracked to.

NPCs, such as tanks or ghosts, can not be backtracked due to them not being lag compensated.
Cheaters cannot backtrack with projectile weapons due to the same reason.

Often, people accuse players who seem to facestab them of abusing the cl_interp command. In most cases, this simply is not true.

Bunny Hop / Bhop

Automatically jumps when you land, which prevents the game from slowing your velocity down.

Partially fixed in the October 31, 2007 Patch by lowering the maximum air velocity while in a 'jump' state; however, bhopping still gives a slight speed boost when combined with air strafing.

Bypass sv_cheats 0

Can bypass sv_cheats to access commands like mat_fullbright, noclip and buddha mode don't work.

Bypass Interp restrictions

Allows cl_interp to be set to 0. This is only for increasing accuracy, and does not have much effect on gameplay.

Crit Bucket Manipulation / Crit Hack

To fix constant criticals, Valve released a new random crit system which requires players to fill a bucket by shooting before they can receive random crits.

It's possible to "store" random crits by filling up the crit bucket (range 0-1000) and sending crit requests to get crits on demand as long as you have it filled. Some weapons can take longer to receive crits as they require a bigger bucket.

Melee weapons do not follow this crit bucket system, which allows them to crit 100% of the time with cheats. For a short period, it was discovered that weapons with "No Random Crits" could still crit (0.015% chance). This was abused to get nearly constant crits on these weapons until it was fixed in the Meet Your Match update.

In order for any sort of crit hack to work, the server must have 'tf_weapon_criticals' and 'tf_weapon_criticals_melee' set to 1, respectively (which is enabled on Valve Casual servers).

Chatspam

Spams messages in chat, normally advertising something. Some cheats abuse newlines / linebreaks to "clear" chat and make only their messages visible.

Patched in the June 16, 2020 Patch, which added rate limit checks for in-game text chat.

Community Anti-Cheat Bypass

Prevents detections on servers running community-made anti-cheats such as Sourcemod Anti-Cheat or Little Anti-Cheat by either 'legitimizing' features, or by abusing exploits.

Custom Item Schema

Cheaters can load a temporary custom item schema that normally defies the rules of the item schema provided by the game.

Things custom item schema can do:

• Remove any equip_region restriction, which can be seen by everybody.
• Add attributes to any item in the game, which only shows up for them and disappears once the schema is unloaded.
• Add any item into their backpack, which only shows up for them and disappears once the schema is unloaded.
• Increase the amount of backpack slots they have, which can trick websites that use Steam's API to get false backpack data.

This does not allow for any economy-breaking exploits, as Valve has added extra measures to prevent that from happening.

ESP

ESP stands for Extra Sensory Perception. ESP is considered anything that gives extra information visually. Examples include:

• Showing player positions.
• Showing player health.
• Showing player ÜberCharge and its current percentage.
• Showing player class.
• Showing player weapon.
• Chams (changes the colors of the model, making them easier to spot & visible through walls).
• Making the players glow constantly, similar to how your teammates glow after you respawn.
• Showing information about the player, such as the currently equipped weapons, or if the player is zoomed in.

Fakelag

Abuses packets so the server doesn't update your position for a maximum of ~23 ticks. To others, it looks like they are "lagging", but their ping will be relatively low and from their view the game looks fine. Due to the nature of fakelag, it is mostly used to counter cheaters to make their aimbot miss.

Fake Latency

Fake Latency can refer to 2 things.

• Ping Increaser:Artificially inflates your ping to the server. The higher the ping is, the longer the backtrack is, meaning cheaters can hit players way after they went behind a wall.
• Ping Decreaser: Artificially decreases your ping to the server. This has no real effect on gameplay, and the real ping can easily be found by typing 'ping' in console.

Fast queue

Exploits the queue region matchmaking system to result in much faster queue times.

FOV Manipulation

Allows for FOV (also known as Field Of View) to be manipulated beyond the range of 55 to 90, the default range accessible to non-cheaters.

Force Halloween

Allows for attributes such as spells to be usable in non-Halloween games.

• Unlike Custom Item Schema, this allows spells to be shown to other players, rather than being just client-sided.

Followbot / Walkbot / Multiboxing

A bot that can perform actions without user input. Commonly used to assist cheaters or cause mayhem.

Unlike regular bots, these bots are different because of how they are presented. For instance, regular bots are able to freely roam around a specific map, while walkbots must have a set path that is created by the host.

These bots will usually walk on a predefined path and aimbot at the location set. Unlike regular bots, walkbots do not detect Sentry Guns, and will usually walk straight into their line of sight, allowing for a well-hidden Engineer to easily deal with them.

Capabilities:

• Following a player.
• Healing and Übering players.
• Defending a location.
• Roaming map navmeshes to hunt enemy players.

Killsay

Says a message when a player is killed, normally insulting them with the cheater's Steam username, class, or weapon.

Noisemaker Spamming

Allows cheaters to use any noisemakers that have limited uses without actually using their limited use.

No Recoil

Removes any bobbing received by shooting weapons or getting hurt; this is mostly cosmetic, but can help with aimbot accuracy.

No Projectile Inaccuracy

Under the same category as No Spread, this removes any inaccuracy projectile weapons have, such as Beggar's Bazooka deviation or Huntsman charge inaccuracy.

Speed Hack

Caused by cheats sending a lot of usercmds at once. Fixed across the Source Engine games by limiting the number of usercmds accepted at a time, however it still exists today.

Roll Speedhack

When Valve patched "viewangle speedhack", they only patched it for people standing; the patch does not apply to cheaters that crouch and can be easily seen as they crouch and walk backwards.

This will allow cheaters to crouch at walking speeds.

Server Seed Prediction

If the server runs long enough, the seed value (which determines the spread for client weapons) will be a big floating point.

This introduces a big imprecision (as it gets rounded more and more). The client can predict the pattern generated by the server as you only need a value approximately close to that of the servers, and the rounding will do the rest, which will allow for no spread-like properties to work again. This doesn't work that well on Valve's Casual servers due to them not running for a long enough period; however, it can work well on some community servers, depending on if they automatically restart or not.

Thirdperson

Allows cheaters to go into third-person regardless if the server has 'sv_cheats' set to 1 or has any plugins installed on a community server.

Taunt Slide

Originally a bug that would allow player actions when taunting if you taunted right before you fell off something. Cheaters took advantage of this so they could taunt slide whenever they taunted, without needing to fall off anything.

This was fixed in an update but is still partially possible, using moving taunts to instantly turn without any turn delay, or moving sideways while using the taunt.

Voice Spam

Spams an audio file into the voice chat system.

VAC Bypass

Also known as VAC Disabler, this cheat has been built into many cheat injectors and causes VAC to not verify the game files. This, however, does not remove VAC Bans.

Tickbase Exploits

Allows the client to "warp" on command up to ~23 ticks on Valve servers (value is dictated by sv_maxusrcmdprocessticks) by sending multiple usercmds after faking packet loss. This will cause the player to teleport ~23 ticks (roughly a third of a second on 66 tick servers). This feature exists due to the way the game compensates for packet loss, and can be broken down into airstucking and speedhacking for a short period of time.

This can also be utilised for another feature commonly referred to as doubletap, which allows firing in quick succession.

Patched Cheats

These are features in cheats that have been patched by Valve within content updates.

Achievement Spammer

Cheaters could rapidly unlock and relock achievements, which would spam the chat and constantly play the achievement earned sound.

This was fixed sometime in 2014 by Valve adding a limit of how many achievements can be displayed in chat at once.

Anti-Votekick

Cheaters could type 'retry' on Quickplay accepted servers in the Developer Console right before a votekick would go through, making the vote useless.

Fixed in July 7, 2016 Patch with the introduction of Casual Mode.

Airstuck

Causes a cheater to float in mid-air by sending no usercmds to the server.

This was found to contain various exploits, such as:

• Building velocity with Soldier's Rocket Launcher or Demoman's Stickybomb Launcher.
• Pyro's Phlogistinator to have infinite ÜberCharge if one activated it and spammed taunts.
• Infinite Bonk! Atomic Punch / ÜberCharge.
• Infinite Medi Gun healing range.
• Capture Control Points in Casual Mode during countdown timer.
• Breaking certain aimbots.

Fixed in April 20, 2017 Patch by introducing a new command 'sv_player_usercommand_timeout' which will require cheaters to send a usercmd depending on the value set; setting to 0 disables the fix.

Constant Criticals

Originally, cheats could get 100% crits by setting the tickcount to when they would get crits.

Fixed sometime in 2013 with the introduction of the crit bucket system.

Hitscan Silent Aim

Hitscan refers to weapons that use hitscan to hit players, like Shotguns or Pistols.

"Perfect Silent Aim" (commonly known as pSilent in cheats) used to hide silent aim snaps from spectators.

Fixed in July 23, 2015 Patch by introducing a new command 'sv_maxusrcmdprocessticks_holdaim', which allows servers to hold client ticks for multiple ticks; setting to 0 disables the fix.

Minigun Jumping

Normally, when you're revved up with the Heavy's Minigun, you can not jump. Cheats could remove this restriction by simply telling the game that you're not revved up.

Fixed sometime in 2013.

No Spread

Predicts or changes the seed of a weapon to remove/reduce weapon spread.

Fixed in July 23, 2015 Patch by making the server control the seed instead of the client.

Name Stealer

Steals the names of players to get them kicked or help cheaters avoid kicks.

Valve introduced several fixes to mitigate the issue of namestealing, such as:

• Showing avatars in callvote UI.
• Adding sv_namechange_cooldown_seconds: Set amount of time before a player can change their name again.
• Adding sv_vote_issue_kick_namelock_duration: Set amount of time a player can set their name again after getting a vote called on them.
• Adding tf_allow_player_name_change which prevents changing names completely

Fixed in September 16, 2021 Patch that disables the ability for 2 or more players to have the same name in a server.

Scope Hack

This hack helps you charge the scope of a Sniper Rifle faster/instantly.

Server Lagging

Sending too many commands per tick could cause the server to rubberband or completely freeze players, often causing connected players to time out.

This was partially fixed in the June 7, 2018 Patch by limiting the number of commands a player can send per tick; however, some Community servers are still affected.

Sequence Freezing / Remove Conditions

Abused the netchannel to skip sequences. Nearly all conditions could be removed, such as fire/bleed.

Depending on how many sequences you skipped, cheaters could break player lag compensation, making it hard for people to hit the cheater with hitscan-based weapons.

Other side effects included:

• Prematurely ending taunts (Phlogistinator included, giving extended ÜberCharge protection).
• Removing stuns applied by ghosts.
• Duping infinite Health Packs.
• Duping infinite Ammo Packs.
• Infinitely throw Sniper's Jarate or Scout's Mad Milk.
• Instantly or speed up captures on control points.
• Instantly decloak as Spy, skipping the decloak animation.
• Instantly reload, depending on the weapon.
• Instant spinup with Heavy's Minigun.
• Reverse capture control points, allowing the defending team to capture points for the attacking team. This also caused sequence breaks, causing no MVP screens and long setup times.
• Getting ignored by NPCs, such as an Engineer's Sentry Gun.
• Using the Sniper's Huntsman to deal negative damage, giving enemies massive overheal.
• Shoot twice at once with weapons that have delays before their next shot (ex. Shotguns or Rocket Launchers).
• Firing Demoman's Stickybomb Launcher stickies all at once.
• Abusing Healthpacks to give infinite overheal using Heavy's Gloves of Running Urgently.
• Delay charges on any weapon that could be charged, such as Soldier's Cow Mangler or Demoman's Stickybomb Launcher.

The remove conditioning effect could be done by legitimate means by purposely freezing the game (such as spamming snd_restart) to desync yourself from the server.

Condition removing was fixed in November 7, 2017 Patch, but some of the effects still remained, which were patched at a later date.

Viewangle Speedhack

Another form of speedhacking rose soon after the original speedhacking was patched out, known as "viewangle speedhack"; it would allow for higher than normal velocities, but wouldn't have the same effects of normal speedhacking.

Viewangle speedhack was fixed in July 24, 2014 Patch.

Bots

Since late 2019, bots (semi/fully automated cheating programs with little to no input from humans) have been created to join Casual servers using aimbot cheats, chat spam, server lag, spinbot, walkbot, and votekicking real players, among other things.

Several updates have attempted to fix or mitigate the chat and voice spam, name stealing, votekick initiation, team name changing, server lagging, and the unequipping of cosmetics.