Security researchers have identified an increase in malicious activities targeting individuals seeking information or early access to the upcoming video game Grand Theft Auto 6 (GTA 6).
As of the latest reports, Rockstar Games has not made the title available for pre-order, download, or participation in a beta testing program. Anyone encountering offers for these should treat them with extreme suspicion.
Nature of the Scams
Cybersecurity firm NordVPN has documented multiple types of attacks exploiting public anticipation for the game. According to a threat intelligence report, scammers are using websites and emails to deceive users into providing personal information or downloading malware.
- Phishing Campaigns: Scammers send official-looking emails that claim to offer invitations to a beta test. These emails direct recipients to fraudulent websites requesting personal details such as names, addresses, dates of birth, and login credentials for gaming platforms like the Rockstar Social Club.
- Malware Distribution: Some websites promise "beta keys" or game files. One malware sample, detected on May 17, 2026, was disguised as a game installer. Upon execution, it activated a hidden file masquerading as an NVIDIA graphics driver component. Other offerings, such as "GTA Mobile 6," prompt downloads that can allow remote access to a user's computer.
- Malicious Advertisements: Scam sites are also promoting free game codes, beta keys, or access to the third trailer for the game.
Targets and Platforms
The scams are primarily targeting PC and Android users. No official release for these platforms has been announced by the game's developer, Rockstar Games. The malicious activities include trojan viruses and Android adware.
Official Guidance
No legitimate pre-order or beta testing program for GTA 6 has been announced by Rockstar Games. The company and cybersecurity professionals advise that the only official sources for information are Rockstar Games, the PlayStation Store, and the Xbox Marketplace.
Recommendations
- Refrain from clicking on links or downloading files from unofficial sources promising early access.
- Change passwords immediately if credentials were entered on a suspicious website.
- Contact a financial institution and report the incident to fraud authorities if banking details were provided.