His friend Marcus had been bragging all week about his new Oppressor Mk II, a flying motorcycle with homing missiles that made grinding for money in GTA Online obsolete. Marcus hadn't spent a dime of real cash. "Found a guy on Discord," Marcus had whispered, eyes glinting. "He sells 'pre-loaded' accounts. Millions in the bank. All the cars."

Then, on a Tuesday night, everything changed.

Two weeks later, Leo got a text message from an unknown number. It wasn't a bill or a spam alert. It was a two-factor authentication code for a crypto exchange he had never heard of. Someone had used the phone number from that "human verification" to try and drain a stranger's Bitcoin wallet. He changed every password he had, froze his credit, and spent a sleepless night checking his bank accounts.

Leo didn't have $50 for a Shark Card, let alone the $150 Marcus had paid. He worked part-time bagging groceries. His own GTA character, a hapless grunt named Leo_77, drove a beat-up sedan and lived in the cheapest high-rise apartment, the one with the broken elevator. He was tired of being griefed by players in fighter jets.

Leo clicked "Get Free Account." A pop-up asked him to complete a "human verification." It was a simple survey: Enter your mobile number for a one-time code. He hesitated for a second, then typed it in. The code came. He entered it. Then another survey: Download this app and run it for 30 seconds. He did. Finally, a link appeared.

"Sir," the support agent said in a flat, tired voice, "your original account, Leo_77, was accessed from an IP address in Vietnam three days ago. The email address was changed. We have no record of you owning it because the account was created using a temporary burner email. Without the original email or proof of purchase for the game, we cannot restore it."

He was in the middle of a street race when the screen froze. A gray box appeared: