Modern Warfare 4 Hides Enemy Data to Starve Wallhacks

Call of Duty will withhold hidden enemy locations from Modern Warfare 4 clients when the game launches on October 23. The system, named Server Culling, is built so wallhack software never receives the coordinates it used to read from a player’s machine.

Infinity Ward baked occlusion layers into the maps. Activision says honest matches should feel unchanged. Cheat makers lose the free copy of the hidden lobby that servers used to hand every client.

How Server Culling Stops Wallhacks in MW4

Most online shooters still tell every game client where every other player is, even behind a wall. The renderer hides the model. The memory does not. Wallhacks just draw the leftover numbers.

Server Culling cuts that feed. If you should not be able to see an opponent, Activision’s server can keep that opponent’s location off your hardware. Cheat code running on that machine then has no silhouette to paint.

Cheat software can’t reveal information it never receives. When a player shouldn’t be able to know where an opponent is, the server can now withhold that opponent’s location data from their hardware.

Call of Duty, official announcement, October 2, 2026

Call of Duty posted the explainer on October 2, with a follow-up that puts the filter on every map available at launch.

Few things ruin a great match faster than wondering whether an opponent earned the win or saw you through a wall.

Wallhacks give cheaters information they were never meant to have. With Modern Warfare 4, we’re introducing a new way to fight back: Server Culling.

Here’s how it… pic.twitter.com/62m41zMbLa

— Call of Duty (@CallofDuty) October 2, 2026

The company says legitimate play is supposed to look the same, and that cheat developers now face a new obstacle. There is no toggle. It runs on Activision’s servers next to RICOCHET Anti-Cheat rather than in place of it.

That last point is the whole design. RICOCHET still hunts programs, hardware, and accounts. Server Culling changes what those programs are allowed to know.

Valorant Ran This Playbook in 2020

Paul Chamberlain, then VALORANT’s anti-cheat lead, described the same idea on April 14, 2020. If an opponent stood behind a wall, the server would not send that location to enemy players. Wallhacks would stare at empty space.

Riot got there by moving client occlusion work onto the server and looking up precomputed visibility tables on the server instead of firing a fan of raycasts every tick. Chamberlain wrote that a first prototype doubled frame times and knocked 128-tick servers toward 64-tick in a 10-player match, because relevancy ran more than 350 checks a frame. After the lookup tables and a few caching tricks, Fog of War used less than 2% of server frame time, down from 50% in that prototype.

Riot also had to gate audio through the same visibility rules and fast-forward animations when an agent popped into relevancy, so enemies did not T-pose into view. A pessimistic line-of-sight test, Chamberlain warned, created a new extreme form of peeker’s advantage: the holder saw nothing until the attacker was already in the open.

Modern Warfare 4’s public version is thinner. Infinity Ward says maps carry occlusion layers and the server will withhold location data. It has not published tick-time cost, whether footsteps are gated, or how far the server looks ahead before a player clears a corner. Community servers in other shooters have shipped similar filters, including a CS2 plugin that culls hidden players on the wire. COD is now putting the idea on a launch slate that includes 6v6, extraction, and Warzone, which is a different scale than a 10-player tactical map.

The Cheat Market This Is Meant to Disturb

Two weeks before the culling post, Team RICOCHET published a briefing on the business that feeds those wallhacks. Developers sit at the top, often behind resellers. Primary vendors move the builds. Lower-tier shops reskin the same code under new logos so a detected product looks new.

The team said it had more than 375 reseller operations disrupted, more than 80 cease-and-desist demands issued, and 31 primary cheat vendors shut down. Call of Duty said it expects Server Culling to disturb the cheat marketplace, and that it will not sit on its hands after launch.

THE CHEAT TRADE IN NUMBERS

• The subscriptions: Intorqa, a threat-intelligence firm, estimated in a February analysis that cheat subscriptions across 15 games generate roughly $3.5 billion a year.
• The wider trade: Counting account sales, boosting, spoofing, and related services, Intorqa put the broader cheating economy at about $8.5 billion a year.
• The shop price: Team RICOCHET said subscription cheats cost around $40 a month on average and upwards of $100 at the high end, with spoofers adding another recurring fee.
• The yearly spend: The same briefing said one cheater could spend more than $1,000 a year to stay in the stack once spoofers are included, a separate total from the $40 monthly sticker.

Sellers also collect data. Team RICOCHET wrote that some shops demand photo ID, hardware details, payment info, and Discord links before a download, and that malware shows up inside the products. The customer is both the market and the leak.

Aimbots and DMA Still Work on Visible Targets

Starving a wallhack does not retire the rest of the catalog. Once an enemy is legal to draw, the client has a target again. Aim software, recoil scripts, and trigger bots can still fire at that model. DMA boxes that read whatever reached the PC will read less when a player is occluded, and they will still see whoever the server has already replicated.

WHAT DIES AND WHAT KEEPS A PRODUCT

Team RICOCHET still lists aimbots, wallhacks, rage cheats, unlock tools, DMA hardware, and those input devices as the product set. In its Season 04 update in June, the team said nearly two-thirds of players temporarily banned for scripted devices such as Cronus Zen and XIM Matrix did not go back to them in Black Ops 7. That is a different fight from hiding a coordinate.

Radar and UAV questions sit in the same gap. If a streak is supposed to reveal enemies, the server has to send those positions on purpose. Call of Duty has not said whether legal intel punches a hole in the cull. Close-range peeks are also a live edge: the moment a player becomes visible, the old data problem returns for a few frames of a gunfight.

The Pop-In Problem Riot Had to Solve First

Hiding an actor until the last possible moment is the feature. It is also the bug. If the server is late to mark someone relevant, that player pops into existence already in the open. If the test is too generous, hidden data leaks again and the wallhack comes back.

Riot’s write-up is the public engineering diary COD has not published for MW4. Early raycasts missed visible limbs. Expanding bounding boxes by velocity helped the client get the packet before the peek. Even then, the team had to keep the check optimistic, because a false “hidden” flag is a teleport on someone else’s screen. Chamberlain called that failure mode a new extreme form of peeker’s advantage.

On a separate netcode post, Riot engineers Matt deWet and David Straily walked through a worked example in which a peeker had about 141ms longer to react than a holder, against human reaction times often near 300ms, under a 35ms round-trip and 128-tick buffering model. That math is VALORANT’s, not Infinity Ward’s. It is the bill any shooter pays when it delays replication to starve cheats.

Beenox, the PC lead on MW4, says the game targets 90 FPS at recommended settings. Higher frame rate helps a holder see a peeker sooner. It does not tell you how fast Activision’s occlusion lookup will promote a hidden player back onto the wire in a 150-person Warzone circle.

WHAT WE KNOW

• The coverage: Server Culling is slated for every Modern Warfare 4 launch multiplayer map, plus DMZ, Combat Outpost, and new live-season maps for multiplayer, DMZ, and Warzone from Season 1 on.
• The toggle: Call of Duty has not described any player setting; the filter runs on its servers beside the rest of RICOCHET.
• The claim: Activision says honest matches should play as intended and that cheat software cannot show data it never receives.

WHAT IS UNCONFIRMED

• Pop-in budget: No published threshold for how many milliseconds the server may wait before an emerging player is replicated.
• Server cost: No tick-time figure for running occlusion on 6v6, extraction, and battle-royale player counts.
• Intel holes: No rule for UAVs, killcams, or other legal reveals that must send positions on purpose.
• Removal rate: Call of Duty has not said how much wallhack use it expects the system to cut.

Those blanks are why this is a launch bet rather than a finished result. The method is old enough to copy. The published proof for this game is still a video.

From 6v6 Lobbies to the Hajin Exclusion Zone

Wallhacks hurt more as player counts rise and as extraction modes reward information. A 6v6 spawn trap is ugly. A DMZ squad that knows every other team through a warehouse wall is a broken economy. That is why the coverage list matters more than the slogan.

THE CALENDAR TO LAUNCH

1. September 18, 2026: Team RICOCHET publishes its cheat-market briefing and enforcement tally.
2. October 2, 2026: Call of Duty announces Server Culling and says it will cover every launch map.
3. October 15, 2026: PC preloading begins at 9AM PT for digital buyers.
4. October 16, 2026: Digital pre-order players get Campaign early access.
5. October 23, 2026: The full game launches at midnight local time.

Platforms on that Friday are PC, PlayStation 5, Xbox Series X/S, and Nintendo Switch 2. PC storefronts named by Call of Duty staff are Xbox on PC, Battle.net, and Steam.

WHERE THE FILTER IS SCHEDULED TO RUN

• Core multiplayer: Every map available at MW4 launch, with no map-by-map opt-in.
• Extraction: DMZ, set in the Hajin exclusion zone after the campaign’s reactor meltdown, and Combat Outpost.
• Battle royale: Warzone, plus new live-season maps for multiplayer, DMZ, and Warzone from Season 1 onward.
• The client: No in-game switch; reporting tools stay in place because culling targets wallhacks, not every cheat class.

DMZ is the stress test hiding in that list. Hajin is a large, weather-shifting map with story missions, dynamic ops, and free roam sharing the same instance. More actors, more cover, more reasons a late relevancy flag will look like a teleport. Combat Outpost is named in the same official post and is otherwise undescribed in the culling materials, so the only hard fact is that it is in the coverage set.

Hardware Bans Still Back the New Filter

Server Culling does not inspect a kernel driver. It changes the packet. RICOCHET still has to catch the software, accounts, and boxes that do not need a hidden coordinate. On PC, Call of Duty is requiring TPM 2.0 and Secure Boot to play MW4, with other security measures possible, and it is pairing that with 2FA and email checks.

In the September briefing, Team RICOCHET said it had issued more than 70,000 new hardware bans in the previous month. Device attestation, already used in Black Ops 7 Ranked, is the other half of raising the cost of coming back after a ban. The Consumer Financial Protection Bureau cited research of 10,000 gamers globally in which one in three said their gaming account had been hacked in the previous two years, which is the replacement-account market those bans keep feeding.

So the second move after hiding the data is making a new PC and a new login expensive. That is why the leftover catalog still has a price list. Aimbots, DMA, and input boxes do not need a wallhack if the server will eventually send a visible target. Call of Duty has not published the share of wallhack use it thinks Server Culling will remove on October 23, and the shops that remain will be selling everything that still arrives on the client.