Guide
Avoiding scams and fake game downloads
Popular games attract imitators. Fake download pages and fake sign-ups try to look like the real thing so you install something you should not, or type a password where you should not. Telling the genuine article from the copy is a skill worth having, and it comes down to a handful of checks.
How fake download pages work
A fake game page borrows the look of a real one — a familiar name, a similar layout — and puts a download or sign-up button where you expect it. The button might install unwanted software, or the sign-up form might harvest a password you reuse elsewhere. Some fakes are reached through search adverts, some through links in messages or forums, and some through pages designed to appear when you search a game’s name. The common thread is that they rely on you not checking where you actually are.
These pages are effective precisely because the real experience they imitate is ordinary. That is why the defence is not suspicion of everything, but a short routine you run each time, so that a convincing fake still fails your checks.
What a genuine sign-up looks like
A legitimate free-to-play game asks for a modest, sensible amount: usually an email address, a password you choose, and confirmation of the email to activate the account. That is the normal shape of a single opt-in. What it does not do is demand payment card details simply to start a free game, ask for information a game has no reason to hold, or hurry you through with a countdown. If a sign-up asks for far more than the account needs, treat that as a reason to stop and check.
Reassuring signs
- The address in your browser bar is the vendor’s own domain, spelled correctly.
- The connection is secure (the address begins with https).
- The sign-up asks only for what an account needs — typically an email and a password.
- You reached the page by typing the address or from a link you trust.
Reasons to pause
- A domain that is almost, but not exactly, the real one.
- Card details required just to begin a free game.
- Pressure to act immediately, or an offer that seems too generous.
- A download hosted somewhere unrelated to the vendor.
Five checks before you download
Run these before you install anything or type a password. They take under a minute together.
- Read the full web address, character by character, and confirm it is the vendor’s real domain.
- Confirm the connection is secure — the address should begin with https.
- Reach the download from the vendor’s own site, not from an advert or a forwarded link.
- Check that you are being asked only for what an account genuinely needs.
- If anything feels rushed or too good, stop — a real game will still be there in five minutes.
The habit that prevents most of it
Type the game’s address yourself, or use a bookmark you made from the real site. Reaching a sign-up by typing the address removes the most common way people land on a fake: following a link without looking.
Warning signs of a fake
Beyond the sign-up form, a few patterns recur across fake pages. None is proof on its own, but together they should stop you.
What to watch out for
- A misspelled domain, extra words in the address, or an unusual ending you do not recognise.
- A “download” that arrives as an unexpected file type, or that asks for permissions a game would not need.
- Claims of a free bonus, in-game currency or a prize in exchange for signing in or paying a small “fee”.
- A page that discourages you from checking — hiding the address, blocking the back button, or pushing a timer.
The Australian Cyber Security Centre publishes current advice on recognising malicious downloads and securing your device, at cyber.gov.au. It is a good companion to this page and is kept up to date as tactics change.
If you already clicked
If you think you have downloaded something you should not have, or entered a password on a fake page, act promptly and in order.
-
Change the password from a device you trust
If you typed a password into a fake page, change it on the real site straight away, and change it anywhere else you used the same one.
-
Run a security scan and update
If you installed a file, update your operating system and run a reputable security tool. Do not reuse the downloaded file.
-
Watch for follow-up contact
Scammers often follow one attempt with another. Be extra cautious about messages that arrive soon afterwards claiming to “help” you recover.
-
Report it
Report the scam so others are warned and, if money is involved, so it can be investigated — see below.
Reporting a scam
If you encounter or fall for a fake download or sign-up, report it to Scamwatch, run by the National Anti-Scam Centre. Reports help build a picture of current scams and warn others. For securing your accounts and devices afterwards, the Australian Cyber Security Centre is the right reference. Our help page lists these and other Australian services with a note on when to use each.
How fakes reach you in the first place
Knowing the routes a fake takes helps you meet it with the right level of caution. Most arrive one of a few ways: through a search result or advert that sits above the genuine site; through a link in a chat, email or forum post, sometimes from a friend whose own account was taken over; or through a page built to appear when you search a popular game’s name. The pattern behind all of them is the same — you arrive without having typed the address yourself, so you do not naturally check where you are. That is why the single most reliable defence is to reach a game by an address you typed or a bookmark you made, not by following a link.
A safer routine for finding any game
You can apply the same short routine to any game, not just the ones we describe here.
-
Start from a known-good source
Type the vendor’s address, use a bookmark, or use an official store you already trust. Treat search adverts with extra care, since placement can be bought.
-
Confirm where you are
Read the full address and check it is secure before you download or sign in. A close-but-wrong domain is the most common tell.
-
Give only what an account needs
Expect an email and a password for a free game. Be wary of card details demanded up front or information a game has no reason to hold.
-
Slow down if pushed
Urgency, a countdown or a too-generous bonus are reasons to pause, not to hurry. A genuine game will still be there once you have checked.