How to spot fake mod sites and scam downloads: executables, locked archives, survey walls, fake buttons and fake GTA VI mods
Wherever people want something for free, someone sells fakes. Mod downloads attract more than their share: fake “premium” mods, “installers” that install something else, survey walls, lookalike sites, and in 2026 a wave of fake “GTA VI PC mods” for a PC game that does not exist. Here is how the common scams work and how to spot them before you click.
The executable that should not be there
A car, a map, a skin or a sound pack is data: models, textures, text files. It never needs an .exe to install. When a download that should be a mod is an executable, an “installer”, a “launcher” or a “patcher”, the file is almost certainly not what it claims. The exceptions are well-known tools with a long public history (Script Hook V for GTA V, Content Manager for Assetto Corsa) downloaded from the places they are known to come from. Everything else: do not run it. The guide on mods that run code explains the categories.
Password-protected archives
“The password is on our other site” is a classic. A password-protected archive cannot be scanned by antivirus software or by VirusTotal, which is exactly why scammers use them. There is no honest reason for a free mod to be locked. ModsDrop refuses password-protected archives for this reason.
Survey walls and “human verification”
“Complete one offer to unlock your download.” The offers are subscription traps, the download is never unlocked, and the site earns from every offer you complete. No legitimate mod host makes you fill in a survey, install an app or enter a phone number to download a file.
Paid mods for cheap, from strangers
Discord and Telegram messages offering a creator’s paid mods for a fraction of the price, or “leaked” packs. At best you pay for stolen work and the author loses income; at worst the file is a trojan and the payment details are harvested. Buy paid mods from their creators, where the money supports the work.
Lookalike sites and fake buttons
Domains one letter off from a known site, pages covered in large green “Download” buttons that are adverts, and countdowns that restart. Check the address bar before you click anything, and on any download page find the real button by its file name and size. A legitimate page tells you what you will get: the file’s name, its size, often its hash and scan result.
Notification prompts and browser extensions
Many sites, this one included, may ask whether they can send browser notifications; allowing them delivers adverts to your desktop, and you can withdraw permission at any time in your browser’s site settings. The scam version is a page that tells you to “click Allow to prove you are not a robot” or to continue the download. Allowing notifications never unlocks anything. Browser extensions offered as “download helpers” are worse: an extension can read every page you visit. Install extensions only from your browser’s official store, and only ones you sought out.
“Disable your antivirus”
Any instruction to turn off your antivirus or add an exception before installing a mod is a red flag. Known tools that inject into games (trainers, script hooks) can trigger false positives, and their authors explain which engines flag them and why. A random file that asks for your defences to be lowered is asking for exactly what it sounds like.
Fake mods for games that do not exist on PC
GTA VI launches on consoles on 19 November 2026 with no announced PC version; “GTA VI PC mods” and “GTA VI PC download” files are fake without exception. The same pattern appears around every big console release and every rumoured port.
How to check a file
- Read the archive’s contents before extracting: data files only, or executables?
- Look for the scan result on the download page, or upload the file to VirusTotal yourself.
- Compare the SHA-256 with the one the author or host publishes (how).
- Find the author’s own page. If the mod exists only on unknown sites and nowhere else, be wary.
- When in doubt, do not run it. A mod is never worth a compromised account.
If you already ran something
Disconnect from the internet, run a full scan with your antivirus and a second-opinion scanner, change the passwords of your important accounts from another device, starting with email and Steam, and enable two-factor authentication where you have not. Then report the file to the site that hosted it.
Data, scripts or native code: which mods can actually harm a PC, what a VirusTotal result does and does not tell you, and the red flags
GTA V mods in 2026: Script Hook V, OpenIV, the mods folder, the Legacy and Enhanced editions, and the one rule that matters
GTA VI arrives on consoles on 19 November: what it means for GTA V modding, and what to expect on PC
Before you download a mod: the five-minute checklist that prevents most failed installs