case breakdown

You're the First Heist... GTA 6

A fake GTA 6 leak warns you about scammers while trying to scam you. The useful question is not how much you want the offer to be real, but who has actually verified it.

Incident overview

Malwarebytes found a fake GTA 6 site advertising a leaked copy for $50 and using a cryptocurrency payment option to lure visitors toward a wallet drainer. Its warnings about other scammers were part of the disguise.

Why it works

When an offer is something we really want, we can start making its case for it. The reassuring details feel important. The contradictions get an excuse. Connor connects that pattern to motivated reasoning.

Protective actions

  1. Check the offer through Rockstar's official site, opened separately from the page making the promise.
  2. Reject wallet requests you do not understand, especially unexpected transfers or permission to move your assets later.
  3. If you approved suspicious permissions, follow your wallet provider's official revocation guidance. Disconnecting alone may not remove them.

Video companion

Watch the breakdown

The scam comes with a scam warning

Getting into GTA 6 early sounds exciting. Finding a page that also promises to protect you from scammers might feel like a bonus.

That is the uncomfortable joke at the center of this story.

In its September 1 investigation, Malwarebytes described a page mixing a countdown and game information with an offer to buy a supposedly leaked copy. The page called competing leak sites scams. Meanwhile, its own payment route led toward a cryptocurrency wallet drainer.

The page did not even agree with itself. A footer denied offering purchases underneath payment buttons. A console-only facts section sat alongside a promise of a PC download.

As checked on September 4, Rockstar's official page lists November 19, 2026 and PlayStation 5 and Xbox Series X|S. A pre-order is not a playable early copy, and information copied from Rockstar does not make another seller authorized.

Wanting it to be real can change the question

Instead of asking, “What would prove this offer is genuine?” we can drift toward “Can I find enough reasons not to give up on it?”

Maybe the contradiction is just an old footer. Maybe the PC claim is a special exception. Maybe a site warning about scams must be looking out for us.

Those are possible excuses a viewer might make, not statements from identified victims. They illustrate the motivated reasoning angle Connor uses in the video: wanting an answer can influence which evidence gets a fair hearing.

You do not need to stop being excited about games. You need a check that still works when you are excited.

Connection is not permission to take everything

Malwarebytes distinguishes connecting a wallet from approving the harmful transaction or permission that follows. Do not collapse those into one step.

Read what a wallet request actually authorizes, not what the website calls it. A purchase amount and ongoing permission to move your assets are different things. Reject a request that does not match the action you intended.

If you have already approved something suspicious, use your wallet provider's official help. Phantom explains that disconnecting from an app is not the same as revoking token approvals. A permission may remain after the connection ends.

What the evidence does and does not show

Malwarebytes documented the site's behavior. Its report does not establish a victim total, a total loss, or what individual visitors believed.

The psychology connection is an interpretation of the pitch, not a diagnosis of players or a measured explanation for every click. The research supports a general reasoning pattern; it does not prove this particular scam succeeded because of it.

Keep the excitement. Move the verification.

Leave the offer page. Open Rockstar's official site yourself and check what is actually available. Apply that same habit to concert tickets, limited releases, or any other offer you would really like to believe.

If the page selling you the answer is also your only source of proof, you have not finished checking.

You can want something without doing the scammer's convincing for them.

Sources

  1. Fake GTA 6 leaked copy drains your crypto wallet (opens in a new tab)

    Malwarebytes · September 1, 2026

    Supports: Primary investigation of the offer, page contradictions, and wallet-drainer behavior.

  2. Grand Theft Auto VI (opens in a new tab)

    Rockstar Games

    Supports: Official release date, listed platforms, and pre-order information at the time of review.

  3. Revoke token approvals (opens in a new tab)

    Phantom

    Supports: Wallet-provider guidance distinguishing disconnection from revoking spending permissions.

  4. The Case for Motivated Reasoning (opens in a new tab)

    Psychological Bulletin

    Supports: Ziva Kunda's 1990 research review. It did not study this scam or its visitors.

Related cases