What happened
Netcraft posted on X on 10 November 2026 a warning about Grand Theft Auto VI scams. Its linked research describes gta6underground[.]com, a Rockstar-branded "Pre-Release Program" promising priority downloads via a file called pre-release-access.exe; gta6[.]exposed, which sold a supposed GTA VI key for any platform, including PC, for $199 in Bitcoin, Monero, Litecoin or Solana; Brazilian "pré-venda" stores with PIX checkout at rockstargamesprevenda[.]store and rockstargamesoficialbr[.]shop; and a charity-themed fake preorder at gtavi[.]my. Netcraft's research, linked from the post, was published on 3 November 2026 and covers domains first seen between July and late October. Rockstar Games is the brand being misused and is not involved. Rockstar has announced GTA VI only for PlayStation 5 and Xbox Series X|S on 19 November 2026 and has not announced a PC or mobile version, so any PC key, mobile APK or early download offered outside the official PlayStation and Xbox stores should be treated as fake.
How the scam works
These sites copy Rockstar branding and offer a pre-release programme, a platform key or a Brazilian pre-order checkout that is not the official PlayStation or Xbox store. According to Netcraft, gta6underground.com promised priority downloads through a file called pre-release-access.exe; gta6.exposed sold a supposed key, including for PC, for $199 in Bitcoin, Monero, Litecoin or Solana; rockstargamesprevenda.store and rockstargamesoficialbr.shop used PIX checkout; and gtavi.my used a charity-themed fake preorder. Money sent by crypto or PIX is hard to reverse, and an executable offered as early access is a malware risk.
Rockstar has announced GTA VI only for PlayStation 5 and Xbox Series X|S on 19 November 2026 and has not announced a PC or mobile version, so any PC key, mobile APK or early download offered outside the official PlayStation and Xbox stores should be treated as fake. Rockstar Games is the brand being misused and is not involved. Netcraft's research, linked from the 10 November 2026 post, was published on 3 November 2026 and covers domains first seen between July and late October.
Source
Public post on X, 10 November 2026: https://x.com/Netcraft/status/2120183573156139313
The indicators come from this source and have not been independently checked by scammers.com.
