Signature detection
Also called: signaturing
Signature detection is pattern matching, and it works much like antivirus. The anti-cheat keeps a database of byte patterns taken from cheats it has already collected. It scans running processes, loaded modules and game memory, then flags anything that matches a stored pattern.
For you, it means this check is about the build you run, not about how you play. If a build has never been sampled, there is no stored pattern for it yet, though other detection methods still apply. A build that many people have used has had more chances to be collected. That is why builds get rebuilt and updated, and why you should check the live status board before you play rather than trust any promise.
How it behaves in play
Nothing about your aim, your stats or your killcams feeds a signature scan. The scanner is looking at bytes, not behaviour. A scan can run when the game launches and again while you play. Pattern lists also get updated. That is the part players miss. A build that was fine last session can be matched in the next one because the list changed, not because you played differently.
What you can actually control
Two things keep you off a pattern list, and only one of them is yours. The provider handles the build. You handle the habits around it. Follow the setup guide for your product every time, and check the status board before a session. Bans are not always issued the moment something is matched, so read ban wave for how batched bans work.
Your hardware gets pattern matched too
The same logic applies below Windows. A spoofer that reports an obviously fake serial hands a kernel anti-cheat something worth flagging. Verse picks its SMBIOS values from over 1,250 real motherboard profiles, so the board it reports is one that actually exists. It is firmware level, so the identity survives every restart. It covers Vanguard and Ricochet as well as Easy Anti-Cheat and BattlEye. It supports ASUS, MSI, Gigabyte and ASRock boards, but not Lenovo, Acer or Dell prebuilts. It sells in limited batches, so use the restock alert on the page.
If you have never spoofed before, Trace 2.0 is the safe first purchase. It is session based, so you run it once per session after injecting your cheat. It covers Easy Anti-Cheat and BattlEye titles, but not Ricochet or Vanguard. Its seed system keeps the same fake identity across sessions, and a machine that looks the same every day is less odd than a new PC every day.
Finally, remember what signatures do not see. Aim smoothing and a visibility check shape what a human reviewer sees in a killcam. They do nothing about a memory scan. You need care on both fronts.
