Fortnite Cheats — The Complete 2026 Guide

Layer 1 — Easy Anti-Cheat (EAC) kernel driver. This is the kernel-level signature scanner. It loads when you launch Fortnite, sits in ring 0, and scans process memory, loaded drivers, image regions, and a growing list of kernel memory pools. EAC is owned by Epic itself (acquired in 2018) so it gets development priority that third-party kernel-AC vendors like BattlEye don't. The Q1-Q2 2026 rebuild expanded its scan coverage into kernel memory pools it didn't previously touch and made the signature comparison roughly 3-4× faster than the prior generation, according to public reverse-engineering reports.

Layer 2 — Epic's proprietary behavioral analysis. This is the layer almost nobody talks about because it's not in the kernel and you can't reverse-engineer it. Epic's servers ingest a high-frequency feed of every player's aim velocity deltas, headshot percentages, reaction-time consistency, kill-streak distributions, and the gap between matchmaking-bracket-expected performance and actual performance. The models flag statistical anomalies for either automated soft action (shadow queue, MMR throttling) or manual replay review at FNCS-tier matches. This is the layer that catches well-built private cheats — the ones that pass EAC's signature scanner clean.

Layer 3 — Hardware fingerprinting + ring-0 callbacks. EAC reads motherboard serial, GPU device serial, RAM module IDs, monitor EDID, USB controller IDs, BIOS UUID, and TPM endorsement keys at session start. It also registers kernel callbacks on process creation, thread creation, image (DLL/driver) loading, and handle operations — which means a cheat driver that loads after Fortnite gets observed in real time. The hardware fingerprint is the foundation of HWID bans: when you eat one, EAC knows it's you the moment your next account boots into the game on the same hardware.

BattlEye is still here, but it's not the primary. A handful of older Fortnite-related integrations still use BattlEye's BEDaisy.sys driver. The BattlEye FAQ explicitly names Fortnite in its compatibility list. But EAC has been the load-bearing kernel scanner on Fortnite for years, and the 2026 rebuild made that more pronounced. When you read "Fortnite uses BattlEye" on a competitor's blog, they're either copying 2018 information or didn't bother to check.

The kernel-AC arms race is structural, not solvable. Two pieces of academic work are worth citing here because they're the only honest external takes available. The ACM "If It Looks Like a Rootkit and Deceives Like a Rootkit" paper analyzes kernel anti-cheats including EAC and concludes they operate as rootkits by every technical measure — and that's the point, because cheats also operate at ring 0. The University of Birmingham anti-cheat market study reviewed 80 cheat-selling sites and reached the same structural conclusion: the kernel-vs-kernel war is open-ended. Every "undetected" claim has a timestamp. The question is how short the detection window is.

Effective February 19, 2026, every PC tournament across Fortnite — from low-prize cash cups all the way through FNCS qualifiers — requires the competing PC to have Secure Boot enabled, TPM 2.0 enabled, and IOMMU enabled in BIOS. The TPM and Secure Boot requirements were already mandatory above account-level-350 tournaments since 2024 — that change drew a lot of complaints from people running Linux dual-boot setups but didn't directly affect cheats. IOMMU was new, and it was specifically the thing that mattered.

Why IOMMU matters for DMA cheats. IOMMU (called VT-d on Intel, AMD-Vi on AMD) is a hardware feature that gates which physical-memory regions a peripheral device is allowed to read or write. Without IOMMU, a PCIe card plugged into your motherboard can do direct-memory-access (DMA) reads of any region of system RAM — including the chunk where Fortnite's game state lives. That's how consumer-grade DMA cheats work: a cheap Xilinx 7-series FPGA card, a fixed firmware blob, and a screen-mirror laptop running the actual visualization. The PC playing Fortnite has no software cheat installed at all. The DMA card pulls player positions, weapons, and HP straight from RAM and renders the overlay on the secondary screen.

Once Epic mandated IOMMU enabled, the chip-level memory wall blocks every PCIe device — including DMA cards — from touching arbitrary memory regions. The cards can still enumerate, they can still talk over PCIe, but their RAM-read attempts now fail at the IOMMU layer. They stop working. All of them, simultaneously, the moment IOMMU was mandated. Coverage from PC Gamer, VideoCardz, and TechSpot triangulated the change. Coverage of cheat-vendor reaction (where vendors broke silence at all) confirmed the impact.

What the mandate did NOT do. It did not kill software cheats. Software cheats run inside the same OS as Fortnite, they don't traverse PCIe memory walls. They have a different threat model entirely (kernel scanner vs hardware-card detection). IOMMU is irrelevant to a properly built software cheat. It also did not affect casual / non-tournament play immediately — non-tournament Fortnite still doesn't enforce the IOMMU check, yet. Industry consensus is that Epic will broaden the check across all matchmaking modes during 2026.

Most competitor cheat sites pretend this didn't happen. Search "Fortnite DMA cheat 2026" on Google and you'll find pages still listing $500-$1,500 DMA hardware bundles with no mention of the IOMMU mandate. That's because admitting your product line was destroyed in one Epic ruling is bad for sales. We're calling it out because honesty about what survives is the whole reason this guide exists. If you're shopping for a cheat in 2026 and a vendor still leads with "undetectable DMA hardware" without addressing IOMMU, that's a tell.

Configurable aim assist with the controls that matter. A modern Fortnite aimbot lets you pick the bones it targets and the order it falls back through them (head → chest → arms → legs is the common stack), the field-of-view cone it operates within (anything from a tight 10° flick to a full 100° wide assist), the smoothness of the aim path (a 0-500 range, where 0 is instant snap and 500 is human-speed flick), a visible-only filter so the bot ignores enemies hidden by terrain, and an auto-prediction toggle that handles bullet-drop and projectile-travel time per-weapon without manual tuning. The full tuning reference is in Fortnite aimbot settings 2026.

Three-style ESP with visibility-based coloring. Fortnite has more class-rich object layers than most BR games, so a good ESP toggles each one independently. The standard Fortnite ESP package gives you player boxes in three styles (full box, filled box, F-tite-flavored cornered box with L-brackets), plus head dots, skeletons, name + rank + platform-icon labels, distance, weapon held, and snaplines — all per-toggle, all color-configurable. Filled boxes typically auto-color green/red based on whether the enemy is visible through the wall or genuinely in line of sight; that single visual cue saves you the time of working it out from the body part overlay. The dedicated cluster Fortnite ESP & wallhack features explained breaks each toggle down.

Rarity-tiered loot ESP. Loot ESP is often higher-conversion than player ESP because knowing where the Mythic dropped is worth more than seeing the enemy two storeys up. A serious Fortnite cheat lets you filter by item type (weapons, ammo) and by rarity (Common, Uncommon, Rare, Epic, Legendary, Mythic — each as its own toggle), plus container types (Chests, Ammo Boxes, Llamas, with an option to hide already-opened containers so the screen stays clean late-game).

Configurable radar window. Standalone radar with size, position, and zoom sliders that you can dock anywhere on the screen, plus an optional FOV cone overlay. Renders enemies plus loot caches plus extract points in a single mini-map. This is one of those features competitor copy underplays — most BR cheat marketing leads with aim and ESP and treats radar as an afterthought. In Fortnite ranked / Cash Cup it's frequently the most-used overlay.

Exploits panel. Surface-level exploit toggles that don't require kernel tricks — an FOV Changer (10-160) that pushes the in-game field of view past Epic's defaults, a No Spread toggle that flattens weapon bloom, a No Recoil toggle that cancels the recoil pattern. Each of these is a one-toggle quality-of-life upgrade rather than something gimmicky. Silent Aim is also in this panel; we cover it specifically below because it's the most commonly misunderstood Fortnite cheat feature.

Silent Aim — what it actually is, what it isn't. Silent Aim fires the bullet at a calculated target while leaving your visible crosshair off-target. The kill cam shows the enemy taking damage with your crosshair pointing somewhere it isn't, which reads as a lucky shot to casual review. It is not a wall-shoot feature. It still requires the target to be in your engagement window — silent aim does not let you shoot enemies you can't see. It also includes a hit-chance slider (0-100%) that lets you miss intentionally to keep your stats statistically plausible. This is an exploit — use it cautiously, not as a marquee setting. Cranked to 100% hit chance, your accuracy curve looks inhuman and replay reviewers notice. Most experienced users run 60-80% hit chance and treat it like an emergency assist, not a default mode.

HWID spoofers are mandatory in 2026. Not optional. Not "nice to have for HWID-ban recovery." Mandatory before you ever inject. The reason is that EAC's hardware fingerprint runs at session start before the cheat loads, so if your HWID was previously flagged, EAC knows it's you the moment Fortnite opens — even if you bought a fresh Epic account. We cover what EAC actually reads in Fortnite HWID spoofer guide 2026, and the cross-game implications are covered in the broader HWID Spoofer pillar.

What doesn't survive 2026. Consumer-grade DMA cards (IOMMU mandate). Public free cheats from GitHub (Lumma / Vidar 2.0 infostealer payloads — see Section 7 below). Cronus Zen and Strike Pack on Fortnite (Epic shipped specific detection in 2025-2026). Triggerbots specifically — Epic's detection on click-cadence patterns made the reliability gap not worth the risk in Fortnite, which is why most serious cheat menus dropped the toggle entirely. Generic FPS aimbots ported from CS2 / Valorant without Fortnite-specific tuning (third-person camera math is different and they break in a box fight).

June 25, 2025 — Epic v. RepulseGod. Federal court found in Epic's favor, fined the defendant $175,000 in damages and permanently banned the account holder. The summary Tom's Hardware article is direct: $6,850 in tournament winnings versus a $175,000 judgment. Epic established the precedent it wanted — cheating in cash-prize tournaments is now legally actionable, not just account-actionable. Three weeks later an OCE pro known as "Mirrored" was banned for using AND selling cheats; this was the second high-profile escalation in a month. The message was for tournament players, not casual queue players: don't think a paid private cheat insulates you from individual legal exposure when there's prize money involved.

April 25, 2026 — FNCS Major 1 DQ wave. Epic disqualified Bugha and roughly 20 other pros mid-event for using "Surge," a bus-drop optimization tool that was widely treated as a community resource. The DQs were later reversed when Epic clarified the tool's status, but the disqualified players' qualifying spots were not restored. The Esports.gg coverage and Dotesports follow-up document both the original action and the partial reversal. The episode highlighted that even pros can't reliably predict which tools cross Epic's line — which is the structural argument for using a paid private cheat with clear, vendor-published guarantees rather than improvising with community tools.

The replay review weapon. What made these enforcement events possible — particularly the RepulseGod judgment — was Epic's replay system, which lets manual reviewers spectate any match retroactively at any frame and verify whether a cheat was used. For FNCS-tier matches with prize money, manual replay review is now standard. This is the layer that catches well-built silent aim: a kill cam can look clean to a casual reviewer, but a frame-by-frame replay analysis can spot the bullet-vector divergence from crosshair-vector. The defense against replay review is stream-proof rendering — overlays that don't appear in OBS captures or Fortnite's own replay system. This is something we ship and document, and most public cheats do not.

What this means for the 2026 buyer. If you're playing casual queue, replay review isn't your problem — Epic doesn't bulk-review casual matches. If you're playing ranked, occasional spot-review is possible but unlikely to target a specific account unless reports stack up. If you're playing tournament-tier (any cash prize event including small cash cups), assume your replays will be reviewed. The implication is that smoothing curves and humanizer settings need to be calibrated for spectator-cleanliness, not just for in-the-moment hit rate. Most providers don't help you with this. The deeper aimbot settings cluster walks through the actual settings that survive spectator review.

The full identifier list. Reverse engineering of EAC (adrianyy/EACReversing on GitHub, plus the leaked EasyAntiCheat.sys source) confirms EAC reads, at minimum: SMBIOS UUID + manufacturer + product name + serial (via NtQuerySystemInformation class 76 / SystemFirmwareTableInformation); SCSI disk identifiers (registry under HKLM\Hardware\DeviceMap\Scsi\...); the CentralProcessor registry key (CPU ID + microcode revision); NetworkAdapter class GUIDs ({4d36e972-...}); the Windows MachineGuid under Cryptography\MachineGuid; the WAT / Software Protection key (under Windows Activation Technologies\AdminObject\Store); WMI block via IoWMIOpenBlock / IoWMIQueryAllData. Every identifier is read, normalized, and hashed with SHA-256 into a composite fingerprint that gets sent to EAC's servers.

What's spoofable. Most of the registry-backed identifiers can be rewritten by a kernel driver before EAC's read fires. SMBIOS reads can be hooked at the kernel level. MAC addresses are trivially spoofable via the NDIS registry layer. Disk serials can be overridden by hooking storport.sys or disk.sys dispatch. The standard commercial HWID spoofer flow is: kernel driver loads pre-game, installs hooks on the ~12 read paths EAC uses, randomizes the values within plausible ranges, persists the new values across the session. The Raw Spoofer handles SMBIOS, disk serials, volume IDs, MAC, monitor EDID, plus seed randomization.

What's not spoofable. A handful of identifiers are firmware-rooted and survive any software-level intervention. CPU ID (the actual silicon-baked CPUID, not the registry copy) can only be spoofed via hypervisor — which is a heavy implementation that adds its own detection surface. TPM endorsement keys (Endorsement Public Key, attestation chain) are cryptographic identities embedded in the TPM chip; only Samuel Tulach's public tpm-spoofer proof-of-concept has even attempted this, and it has known reliability issues. Monitor EDID is read from the panel firmware; in 2026 EAC is starting to track this on high-profile tournament builds. GPU firmware serials are typically not spoofable without flashing the firmware itself, which is a one-way operation. Microsoft Remote Attestation (used by COD: Black Ops 7, not yet by Fortnite as of May 2026) cryptographically attests the entire boot chain to Microsoft's cloud — that's an entirely different threat model that current spoofer technology cannot address.

The Win 11 + TPM 2.0 era is different. When Fortnite mandated TPM 2.0 + Secure Boot at the >account-level-350 tournament tier in 2024, then expanded to all tournament play in Feb 2026, the long-term implication is that EAC's hardware fingerprint will increasingly anchor on the TPM endorsement key — which most spoofers cannot touch. That's the structural reason behind the rise of Microsoft Pluton-aware threat modeling: hardware-rooted attestation is replacing software-readable identifiers across the entire anti-cheat industry. We covered this market-wide in the HWID Spoofer pillar; the Fortnite-specific cluster on HWID spoofers gets into game-specific tuning.

Why hardware swaps don't always fix HWID bans. A common forum question is "I got HWID banned — will swapping just the motherboard work?" Sometimes yes, often no. Because EAC composites a dozen identifiers into one hash, your disk serial, RAM SPD serials, MAC addresses, and CPU ID all carry over with the old hardware. Swap only the motherboard and you might survive a first re-detection but fail a second one. The honest minimum hardware swap for a clean re-entry is motherboard + storage + NICs — which is the entire "upper half" of a PC. The cost-benefit math almost always favors a software spoofer over hardware replacement. We compare the three options head-to-head in HWID spoofer vs hardware swap vs format drive.

February 27, 2025 — Epic publishes a major anti-cheat policy update via fortnite.com/news/fortnite-anti-cheat-update-february-27-2025. The big change: first-offense bans move from immediate permanent to 1-year matchmaking suspension (account still usable for social features); second offense = lifetime ban. Coincides with a sweep wave.

April 25, 2025 — One-time amnesty unban wave. Epic reversed all lifetime cheating bans older than 12 months, effectively resetting the player base under the new tiered model. Documented by GearUpGamer, Insider Gaming, Beebom.

June 25, 2025 — Epic v. RepulseGod federal court judgment ($175k). Coincides with targeted enforcement wave against high-profile competitive cheaters. Tom's Hardware coverage.

July 2025 — OCE pro "Mirrored" perm-banned for using and selling cheats. (Esports.gg coverage.)

December 2-3, 2025 — Large ~70,000-account ban wave. Primarily targeted "The Dub" Discord bot abuse rather than cheats specifically, but coincided with a concurrent EAC sweep. Documented by FRVR and Grokipedia.

February 19, 2026 — The IOMMU mandate goes live. Coincides with the first post-mandate ban wave specifically targeting DMA users who hadn't yet realized their cards stopped working. Detection method: PCIe device enumeration anomalies (a working IOMMU-walled card looks different from a misconfigured one). Exact account count not publicly disclosed.

April 25, 2026 — FNCS Major 1 disqualifications. Bugha + ~20 pros DQ'd over Surge / bus-drop tool. Later reversed but spots not restored. Esports.gg + Dotesports reversal coverage.

We track the live state of every ban wave (and the cheats that survived each) in the Fortnite cheat status page. The dedicated cluster post Fortnite ban wave history 2020-2026 expands every entry above into a full incident report.

The Acronis TRU finding. In a comprehensive 2024-2025 analysis of fake game cheats distributed via GitHub and Reddit, Acronis' threat research unit (Acronis TRU posts/vidar-stealer-20) confirmed that Vidar Stealer 2.0 is the most common payload, followed by Lumma, StealC, and RedLine. The malware harvests your Chrome / Firefox saved passwords, Steam session tokens, Discord tokens, crypto wallet keys (MetaMask, Phantom, Exodus, hardware wallet companion apps), and 2FA backup codes. Detection on Fortnite isn't the worst outcome — it's a footnote compared to losing your Steam library and crypto wallets in the same hour.

The Flare statistic. Flare's threat research on infostealer infections concluded that 41.47% of all gaming-related malware infections trace back to fake cheat downloads. (Flare press release.) The aggregate is in the tens of thousands of victims per month across all titles. Fortnite is the largest single contributor because of its player base.

The Microsoft Lumma takedown. In May 2025, Microsoft's Digital Crimes Unit seized 2,300 domains that were distributing Lumma infostealer payloads, many of which were hosting fake cheat installers. Within weeks of the takedown, Lumma operators had migrated to new domains and resumed distribution. The takedown was meaningful but it didn't end the threat — it just changed which URLs are dangerous.

The GitHub honeypot pattern. Search GitHub for "free Fortnite cheat" and you'll get hundreds of repositories with similar profiles: fresh account, recent push, README claiming undetected status, a Releases tab with a Windows .exe that's flagged by 30+ AV vendors on VirusTotal. Many include a disabled-by-default Defender exclusion script that the user is told to run "to prevent false positives." Running that script makes the user invisible to their own antivirus for the duration of the malware install. This pattern is described in detail in GBHackers and Game Developer's piece on Fortnite cheat malware.

The math on paid versus "free." A paid Fortnite cheat from a reputable provider costs $4.99 per day to $30-50 per month. The expected loss from a single Vidar Stealer 2.0 infection — assuming the user has any crypto holdings, any Steam library worth more than $100, or any saved passwords for financial accounts — averages into the thousands of dollars. The risk-adjusted expected value strongly favors paid. The full breakdown is in the free Fortnite cheats cluster.

Test 1 — Do they acknowledge the IOMMU mandate? If the provider's website still leads with "undetectable DMA hardware" as their flagship offering and never mentions the February 2026 mandate or its impact on consumer-grade DMA, they're either dishonest or out of touch. Either way, don't buy.

Test 2 — Do they name EAC as primary, not BattlEye? This is a small detail that separates current research from copied 2018 content. Fortnite is EAC-primary in 2026. A provider whose technical pages say otherwise hasn't updated.

Test 3 — HWID spoofer included or sold as separate upsell? The honest model is to bundle the spoofer or sell it as a low-margin add-on, because using the cheat without a spoofer guarantees account loss the first time you eat a ban wave. Providers that sell the spoofer at premium pricing as an upsell are betting against your account survival.

Test 4 — Loader downtime policy. When EAC ships a signature update and the loader needs to patch, what happens to your subscription? The honest answer is auto-pause — you don't pay for the hours the cheat isn't usable. Less honest providers run the clock anyway.

Test 5 — Public Discord with active customer presence. A provider with a public Discord where you can see real conversations, see how long support takes to respond, see how customers talk about each other and the staff — that's evidence of an actually-operating business. A provider with no public Discord (or a Discord that requires a paid role to join) is signaling something.

Test 6 — Refund / warranty terms in writing. Vague "satisfaction guarantee" copy isn't a refund policy. Specific terms (e.g., "refund within 24 hours if cheat hasn't been used; pro-rated credit if cheat goes down for >12 hours of EAC patching") are.

Test 7 — Stream-proof rendering for ranked / tournament use. If you play any cash-prize Fortnite, the cheat needs to be invisible in OBS captures and Fortnite's own replay system. This is a yes/no question — either the provider ships stream-proof rendering or they don't. Ask before you buy.

Our honest comparison cluster RawCheats vs Battlelog vs SkyCheats runs the same tests on our biggest competitors. The full pricing comparison cluster covers ~12 active 2026 providers with live pricing snapshots.

Everything is in-house. Loader, driver layer, menu framework, offset pipeline — all of it is written and maintained by our own team. Almost every other Fortnite cheat brand you've seen is a reseller storefront: their "loader" is a re-skinned upstream product, their detection events propagate from a source they don't control, and when the upstream provider eats a wave, every reseller eats it simultaneously. We're not in that network. When Raw Fortnite ships an update, it's because we wrote and tested it, not because we waited on a supplier.

External cheat, not internal. Raw Fortnite runs as its own process — it doesn't inject code into Fortnite. External architecture is meaningfully harder for kernel-mode anti-cheats to detect than internal/injected cheats because EAC's signature scanner can't sweep memory regions it doesn't own. This is one of the reasons we've sustained long detection-free windows across multiple EAC rebuild cycles. (We do plan to ship an internal-mode complement in the future for users who want rage-tier exploit features that external can't support — but the legit-mode core is external by design.)

No DMA required. Pure software. No second PC, no $500 PCIe card, no fragmented multi-machine setup. Single download, single license, runs on the same machine you play on. The IOMMU mandate from February 2026 — which we explained in Section 2 — destroyed consumer-grade DMA setups overnight; Raw Fortnite was unaffected because we never built our roadmap around hardware tricks.

Shared menu framework across six products. Raw Fortnite shares a unified menu framework, aimbot priority system, radar layout engine, and ESP preview shim with Raw Rust, Raw Rivals, Raw Arc Raiders, Raw Overwatch, and Raw PUBG. When we improve shared code, all six cheats benefit on the next build. Single team, single design language, single offset pipeline — the kind of engineering pattern most paid cheat brands don't have because they don't write their own code. The recent menu overhaul that landed across the lineup is one example: every product got the same upgrade simultaneously.

Cross-version, cross-hardware compatibility. Windows 10 + Windows 11 supported. Intel + AMD CPUs. Intel, AMD, and NVIDIA GPUs. We don't restrict our supported hardware list to avoid awkward edge cases — we test against the broad set and fix what breaks. Status block at the top of the product page shows the live compatibility matrix and undetected status.

Continuously evolving anti-detection infrastructure. We treat our bypass stack as a moving target, not a static product. Multi-layered design means we don't lean on any single technique that EAC can sign and kill. The roadmap includes deeper kernel-side improvements and additional driver-layer hardening that we don't talk about specifically (publishing the recipe would shorten its shelf life), but the practical effect is that detection windows keep extending. We ship a fresh build for every EAC update, typically within 6-12 hours of the push, with offset-level updates pushed transparently in between so customers don't have to redownload binaries for routine game patches.

Real touches that show up in the menu, not just the marketing. The menu has nine built-in language translations (Arabic, German, Spanish, French, Japanese, Korean, Brazilian Portuguese, Russian, Simplified Chinese, plus English) — not Google-translate stubs, actual translation files. Configs save and load by slot so you can swap between casual, ranked, and tournament presets without re-tuning. The ESP preview pane mirrors your toggles live on a rotating character so you can see what your ESP will look like before you queue. Keybinds support keyboard, mouse buttons, and controller inputs. None of these are flagship features individually but collectively they're the difference between an interface someone built once and one we keep improving.

HWID spoofer companion product. Raw Spoofer ships separately at $4.99 and we explicitly tell every customer to run it first. We don't gouge on it as an upsell — the price reflects what it costs us to maintain it. If you ever eat a HWID flag (from any cheat, any game), running the spoofer before your next session restores a clean hardware fingerprint.

All of this is documented on the Raw Fortnite product page with current pricing and the live undetected/CPU/OS compatibility block.

Step 1. Buy a Raw Fortnite subscription plus the Raw Spoofer add-on from the product page. License keys are delivered to your purchase email instantly.

Step 2. Cold-boot your PC. Don't open Fortnite or the Epic Games launcher yet. Confirm Secure Boot status (it's fine to have it enabled if you only play casual; if you play any tournament, it's required).

Step 3. Run Raw Spoofer as administrator. Enter your spoofer license key. It will randomize ~12 hardware identifiers and persist them for the session.

Step 4. Launch the Raw Fortnite loader. Enter your cheat license. Select Fortnite from the game dropdown.

Step 5. Launch Fortnite normally through the Epic Games launcher. When you reach the main menu, click "Inject" in the loader. The cheat menu overlays within 2-3 seconds. Default keybind to toggle the menu is INSERT.

Step 6. Open the cheat menu (default keybind: INSERT — rebindable in Settings → General → Menu Key). Configure your aimbot: pick your bone priority order (Head → Chest → Arms → Legs is the standard stack), set FOV cone (10-100% — start around 40% and tune down for tournament play), set smoothness (0-500 — higher values produce more human-looking aim curves), and toggle visible-only filtering if you're playing ranked. Visuals → Players + World tabs give you per-toggle control of every ESP element. Save your tuned config to a slot (Settings → Configs → Save) so you can swap presets between play modes without re-tuning.

If anything fails — license issue, EAC patching, loader not injecting — Discord support is available at discord.gg/rawcheats. Most issues resolve in under 10 minutes during waking hours.