External cheat
An external cheat is a cheat that runs as its own separate program next to the game instead of inside it. It reads values out of the game's memory from the outside. Visuals are drawn in an overlay window that sits on top of the game. Aim features move your mouse instead of changing the game itself. Because no code is loaded into the game process, an external leaves a smaller footprint inside the game. That does not make it safe. Anti-cheat looks at more than injected code. Kernel anti-cheats such as Ricochet and Vanguard read firmware identifiers as well. An external can still be detected. The opposite approach is an internal cheat.
How an external behaves in play
The cheat runs as a second process on your PC. It reads values such as player positions and health straight out of game memory. No code is loaded into the game process, so there is no injection step. Visuals are usually drawn through a separate overlay window layered over the game. Your ESP boxes and lines come from that overlay, not from the game's own renderer. Aim features move the mouse input, so an aimbot steers your real aim rather than rewriting the view inside the game.
That design has limits. An external reads the game from outside, so its picture can sit a step behind what the game draws. Features that need to change how the game behaves are out of reach. An internal cheat runs inside the process and can do more, at the cost of touching the game directly.
What this means for detection
Skipping injection removes one signal, not all of them. Anti-cheat still looks at your machine as well as the game process. Ricochet and Vanguard run at kernel or driver level and read firmware identifiers that a session spoofer does not touch. External is a design choice, not a shield, and no cheat is ban proof. The live board at /status is the place to check current state before you play.
If your machine is already flagged, a fresh account alone will not fix it. A HWID spoofer gives a clean account a clean machine. It does not unban the old account and does not remove the ban record. TRACE 2.0 is session based, and you run it once per session after your cheat is loaded, not before. It covers Easy Anti-Cheat and BattlEye titles, but not Ricochet or Vanguard. Verse is firmware level and adds Ricochet and Vanguard cover. Before running either one, turn off Memory Integrity under Core Isolation and disable Windows Defender.
How you play still counts
The cheat type is only part of the picture, and your settings carry weight too. Set aim smoothing to 5 or higher so the aim moves like a hand instead of snapping like a machine. Turn on a visibility check so the aim does not lock through walls, which keeps killcams clean. ESP only, with no aim assistance at all, is the lowest risk setup there is. A brand new account posting pro level numbers draws far more attention than an aged one.