Scammers are using excitement around Grand Theft Auto VI to promote fake downloads, early access, mobile editions and giveaways. These offers can expose a household to malware, cryptocurrency theft, lost payments or stolen account credentials, according to Help Net Security.
What happened
Security company Netcraft examined GTA VI-themed websites created between July 1 and October 27, 2026. The sites commonly claimed to offer leaked builds, advance access, nonexistent phone versions or free copies of the game.
Some sites asked visitors to download files or Android app packages. One supposed Windows download was flagged as a trojan by 34 of the 68 security engines that checked it through VirusTotal, according to Help Net Security. A separate fake download reported in September installed remote-access malware, an information stealer and ransomware designed to destroy files.
Other pages demanded cryptocurrency payments, including one asking for $100 to unlock the game and another advertising versions for multiple platforms for $199. Some sites used surveys, offers and fake “human verification” prompts to collect email addresses or generate affiliate revenue.
The scams also borrowed the CyberLeek name after that unidentified source published apparent gameplay footage and images. Netcraft counted 121 newly registered domains containing that name, but CyberLeek did not release a playable game.
Rockstar has announced GTA VI for PlayStation 5 and Xbox Series X|S, with a November 19 launch. According to the source, Rockstar has not announced a PC, Android or iPhone version, and there is no legitimate early-access build before launch.
Who is affected
The main targets are GTA fans, parents buying the game for children and anyone searching for leaks, discounts or early access. Windows users face malicious executable files, while Android users may be told to enable installation from unknown sources and sideload an APK.
People who connect a crypto wallet, send cryptocurrency or enter personal details are also at risk. After release, Netcraft expects scammers to shift toward fake offers for free in-game currency. Those pages may request Rockstar, PlayStation or Xbox credentials; reused passwords could expose other accounts, and saved payment methods could enable unauthorized purchases.
What to do now
Buy only through the console store. On a PlayStation 5, open the PlayStation Store; on an Xbox Series X|S, open the Microsoft Store. Do not follow an ad, social post, email or message claiming to provide a special download.
Reject every early-access or mobile offer. Do not download a GTA VI PC installer, Android APK or iPhone app. No PC or mobile version has been announced in the source, and no playable early-access build is legitimate before November 19.
Do not send cryptocurrency or connect a wallet. Crypto payment demands are a warning sign. Close the page without approving a connection, signing a transaction or paying an “unlock” fee.
Remove anything already downloaded. Delete the installer or APK without opening it. If it was run, disconnect that device from Wi-Fi and use its installed security software to run a full malware scan.
Change exposed passwords from a clean device. If you entered a Rockstar, PlayStation, Xbox or email password, go directly to the official account website, create a unique password and review recent purchases. Change the password anywhere else it was reused.
Add protection at the home-network level. A dedicated firewall can provide another security layer for devices that share the same internet connection.
Firewalla Purple SE fits households looking for an affordable, serious home firewall.
Sources
- Scammers capitalize on GTA 6 hype to push malware and crypto cons — Help Net Security
Written by the CyberSec24 news desk with AI assistance, from the sources above. Spot an error? Tell us and we'll correct it.