- A DMA cheat runs on a second computer, so the gaming PC holds very little.
- Default cards, removed cards and boards acting as a mouse can still show up.
- Against a well-made card, a short camera check is what settles it.
DMA cheats are expensive, they need a second computer, and they leave very little on the gaming PC. That is why some players are sure they will pass any check. Here is what a DMA cheat is, and what you can still check.
What a DMA cheat is
DMA stands for direct memory access. The cheat is a small card in a PCIe slot of the gaming PC, usually built on an FPGA chip. The card reads the game's memory directly over the PCIe bus and sends it over a cable to a second computer, where the actual cheat runs and shows player positions, a radar or ESP.
Because the cheat software runs on the second computer, there is no cheat program on the gaming PC to find.
Why software checks struggle
Most checks look for programs: what ran, what was downloaded, what is loaded into the game. A DMA setup has none of that on the gaming PC. Better cards also pretend to be ordinary hardware - a network or sound card - so they do not stand out in the device list either.
Traces it can still leave
- The card itself. Cheaper and default cards show up in the hardware list as FPGA boards, or as devices that claim to be one thing and are something else.
- Cards removed before the check. Windows remembers devices that were connected before. In Device Manager, View → Show hidden devices lists hardware that is no longer plugged in.
- Changed protection settings. DMA setup guides often tell people to switch off IOMMU in the BIOS (VT-d on Intel, AMD-Vi on AMD). Plenty of PCs have it off anyway, so treat this as context, not proof.
- A board acting as a mouse. Many hardware setups move the mouse through a small board - see below.
The camera check
Against a well-made card, the most reliable check is still a short video call. Ask the player to show:
- Inside the PC - side panel off, every PCIe slot, including the ones under the graphics card
- Cables at the back - a USB cable from the PC to another computer or laptop
- Between the mouse and the PC - a small box or adapter the mouse plugs into
- A second PC nearby - another computer or laptop that stays on while they play
Ask for it straight after the software check, in one continuous call, so there is no time to unplug anything.
Boards that act as a mouse
Hardware aimbots and macro boxes (often called KMBox-style devices) sit between the mouse and the PC. The PC sees an ordinary mouse, while the movements come from the cheat. Many are built on hobby microcontroller boards, which can show up in the device list as such - but a board set up to copy the ID of a real mouse looks exactly like that mouse.
The honest limits
A high-end DMA card with custom firmware that copies a real device perfectly cannot be detected by software - not by after-the-fact checks, and often not even by anti-cheats that run during play. Treat a clean hardware result as no traces found, not as proof. If the rest of the evidence points to a hardware cheat, the camera check is what settles it.