As the release of the highly anticipated game draws closer, cybercriminals are capitalising on the excitement by deploying a wide range of fraud schemes targeting fans eager to secure their copy.
Following the official launch of Grand Theft Auto VI preorders on 25 June, which attracted significant attention, threat actors quickly began exploiting the event as a lure. Scammers have leveraged the heightened demand to deploy deceptive schemes, from fake preorder pages to fraudulent video tutorials, targeting users eager to secure the game. Kaspersky experts highlighted the key scams being used and shared guidance on how users can avoid becoming victims.
Fake Storefronts But Real Losses: The Preorder Trap
Fraudsters have been setting up fake websites that closely replicate the visual style and branding of the official game. These pages feature genuine trailers and promotional artwork, offering users the option to preorder the game for various consoles.
After clicking “Pre-order now”, users are prompted to enter their personal details and payment information to complete the purchase. However, no game is ever delivered. Instead, victims risk having their bank accounts drained and their personal data compromised.
Kaspersky experts have detected these fraudulent pages in multiple languages, indicating that scammers are actively targeting players across different regions. One notable example is a Portuguese-language website impersonating the official PlayStation storefront.
To create a convincing illusion of legitimacy, attackers populated the page with fabricated five-star reviews, an age rating and a displayed preorder price. Upon clicking the preorder button, users are redirected to a registration form requesting their name, email address, phone number, CPF (Cadastro de Pessoas Físicas – Brazil’s individual taxpayer identification number) and other personal information.
From there, victims are asked to pay by entering their bank card details or selecting an alternative payment method. Once the transaction is completed, both their personal data and financial credentials are left entirely in the hands of the attackers.
Not Just Preorders: Fake Beta Access As The Next Bait
Malicious campaigns often rely on a coordinated, multi-channel approach to broaden their reach and reinforce credibility.
In one case, a suspicious website was identified offering what was described as a leaked beta version of the game for download. The website was promoted through video platforms and social media, where numerous accounts shared videos claiming to show users how to download the game safely.
To further reinforce credibility, comments accompanying the videos claimed the download contained a genuine version of the game. Once launched, however, the file can compromise a user’s device, potentially leading to the theft of sensitive data, unauthorised access to personal accounts or the installation of malware running silently in the background.
From Virtual Worlds To Virtual Wallets
Cryptocurrency users are also being targeted through suspicious, low-reputation websites.
In one case, Kaspersky identified a website promoting a token with a name resembling the game’s title. The page imitated the game’s visual style and used its logo to create a strong association with the title. Such websites should be treated with extreme caution, as engaging with them may result in the loss of cryptocurrency assets.
“Highly anticipated game releases have long presented significant opportunities for cybercriminals, and we are already detecting related fraudulent activity. These schemes are carefully timed to capitalise on heightened consumer excitement. Attackers understand that periods of intense anticipation can lower users’ guard and create a false sense of urgency.
“We strongly recommend that users complete purchases exclusively through official platforms and refrain from following links shared by unverified sources. Equally important is robust protection, and our solutions now include AI-powered scam protection,” said Olga Altukhova, Senior Web Content Analyst at Kaspersky.
How To Stay Safe
To enjoy new game releases without worrying about cyber threats, Kaspersky advises users to:
- Be cautious with downloads. Install games and mods only from official sources or reputable websites, as unofficial sources may contain malware.
- Check the authenticity of websites before entering personal data by verifying URLs and organisation names.
- Secure payment information by using prepaid cards or dedicated payment services for gaming purchases instead of exposing bank card details.
- Use a reliable security solution that detects malicious attachments and blocks phishing links. Kaspersky’s consumer solutions now include AI-powered scam protection that combines machine learning-based anti-phishing, real-time behaviour monitoring, and data leak and identity theft detection. In 2025, Kaspersky Premium again received AV-Comparatives’ annual “Approved” certification for anti-phishing performance.
- Enable multi-factor authentication (2FA) on gaming accounts and financial apps, and regularly monitor account activity for unauthorised transactions.
