GTA VI isn’t out yet – and the scams are already in full swing

Grand Theft Auto VI launches on November 19, 2026, for PlayStation 5 and Xbox Series X|S, but cybercriminals are already exploiting the hype with scams targeting eager fans. Security experts at ESET expect such frauds to multiply as the release approaches and the holiday shopping season begins.

Rockstar Games has not announced a PC version, playable demo, beta, or early-access program for GTA VI. The Standard Edition is priced at $79.99, while the Ultimate Edition costs $99.99. Digital pre-orders have been able to pre-load the game since November 10. This official information serves as a reality check for suspicious offers.

Leaks Fuel Scams

The anticipation for GTA VI has made every leak a magnet for attention. On August 18, an entity called CyberLeek began releasing what it claimed was stolen GTA VI material, including gameplay videos and map details. By October 12, TechWiser had cataloged 19 CyberLeek leaks featuring in-game activities, vehicles, locations, and story content.

The CyberLeek campaign became intertwined with a cryptocurrency called $CYBERLEEK on the Solana blockchain. BitOK identified several revenue streams, including token swap fees and voting payments. On August 27, the token creator's wallet claimed and sold liquidity-pool fees totaling 2,676.67 SOL (approximately $225,000).

Netcraft found 121 newly registered domains containing 'cyberleek' after the leaks appeared, with 100 registered in August alone. While some belonged to fan sites, others pushed fake GTA VI builds. BitOK discovered CyberLeek-linked websites advertising a purported 'GTA VI: Development Build' for $40, though it couldn't confirm anyone received genuine files.

Malicious Downloads

Security researchers have found no evidence of a genuine playable leaked copy, but have discovered malware campaigns. In August, Malwarebytes found websites impersonating Rockstar that offered a fake GTA VI demo. The 1.1 MB executable contained Vidar, an infostealer targeting passwords and autofill data across 19 browsers.

Huntress analyzed a different campaign distributing GTA VI-themed ISO images exceeding 100 GB, padded with junk data. One ISO contained multiple threats: njRAT and DCRat remote-access trojans, Mercurial Grabber infostealer, and Chaos ransomware. The fake installer even included a 'License not found' error message to explain why the game wouldn't run.

In November, Netcraft reported CyberLeek-themed sites offering complete GTA VI builds. One provided GTAVI.exe, flagged by 34 of 68 security engines as a trojan. Another offered a 'Cyberleek Launcher' for the 'full leaked version' before demanding $100 in cryptocurrency to unlock the game. ESET has detected dozens of malicious files masquerading as GTA VI content.