How the FiveM & GTA V DMA cheat works: ESP, Object ESP, aimbot and anti-cheat
The FiveM & GTA V DMA cheat works on every FiveM server, on GTA Online, on RageMP and on AltV — with one build, and with nothing installed on the PC that plays. That is possible because all four run the same game underneath, and because a DMA card reads that game's memory from outside. This guide explains what the second PC pulls out of GTA V's memory, how the Player and NPC ESP, Object ESP, player list, device aimbot and triggerbot are built from it, how "every FiveM build" is actually handled, and why FiveM's anti-cheat, server-side scripts and BattlEye all come up empty. If you have not met the DMA card, firmware and second PC before, start with What is a DMA?.
Why one cheat covers FiveM, GTA Online, RageMP and AltV
FiveM, RageMP and AltV are not different games. Each is a launcher and a replacement network layer that loads Rockstar's own GTA5.exe, swaps out the online services, and lets servers run their own scripts on top. The world, the peds, the vehicles, the objects and the camera are all still the base game's, laid out in memory the way Rockstar built them. A DMA cheat reads that base layout, so the same reads work whether the process was started by Steam for GTA Online or by the FiveM launcher for a roleplay server.
The one wrinkle is game builds. FiveM lets a server owner pin an older or newer version of the game, and each build shifts the memory layout slightly. Fave DMA detects which build is running and loads the matching set of offsets automatically — that is what "supports every FiveM build" means in practice. When Rockstar patches GTA V and every layout shifts, the auto updater delivers the new offsets without you doing anything.
The loop, in one picture
- ReadThe DMA card in the gaming PC streams GTA V's memory to the second PC over USB 3, thousands of times a second, without Windows or the game being involved.
- DecodeFave DMA locates the ped pool, the object pool, the network player table and the camera, and turns raw bytes into people, props, names and a view matrix.
- DecidePlayers and NPCs are projected onto your screen as ESP, whitelisted objects are highlighted, the player list is filled in, the aimbot picks a target and the triggerbot checks your crosshair.
- ActThe overlay is drawn on the second monitor or through a Fuser on your main one; aim and click go to your input device, which delivers them to the gaming PC as a real mouse.
- RepeatEvery tick. The server, the FiveM client and BattlEye see a normal player with a normal mouse.
What the second PC reads out of GTA V
GTA V keeps the living world in pools: fixed-size arrays with one slot per ped, vehicle, object or pickup currently loaded. Read the pool, walk its slots, and you have every entity around you. Add the network player table — who each player ped belongs to — and the camera, and you have everything the cheat shows:
| Read from memory | What the cheat builds from it |
|---|---|
| Ped pool — position | Boxes, distance, snaplines, aimbot target selection for players and NPCs alike |
| Ped pool — bones | Skeleton ESP, the head / body aim point, hitbox tests for the triggerbot |
| Ped pool — health, armor, weapon | Health bars, armed / unarmed markers, weapon names |
| Ped pool — player flag | Separating real players from NPCs, with separate toggles and colours for each |
| Network player table | Name, server ID and details for the player list, name tags on ESP |
| Vehicle pool | Which vehicle a player is in, vehicle markers |
| Object pool — model hashes | Object ESP: scan every prop in the session and whitelist the ones you care about |
| Camera / view matrix | Projects every 3D point above onto your 2D screen; gives the aimbot your current angles |
All of that is read. Fave DMA never writes to the game: no spawned vehicles, no money, no god mode, no teleport — none of the "mod menu" features that server anti-cheats are built to catch. It is an information and aim tool, and that restraint is exactly why it survives on servers that ban injected menus within minutes.
Player and NPC ESP
With a ped's position and bones in hand, the camera's view matrix converts each 3D point into a pixel on your screen. Connect the bones and you have a skeleton; frame the model and you have a box; draw a line from the bottom of your screen and you have a snapline. Names come from the network player table, health and armor from the ped itself. Because the overlay is a normal window on the second PC, it can show anything without GTA V drawing a single pixel of it — and a Fuser can merge it onto your main monitor if you would rather play on one screen.
The player flag matters more here than in most games. On a roleplay server most of the peds around you are NPCs — pedestrians, police, gang members — and you usually want them drawn differently from real players, or not at all. Both groups have their own toggles, colours and distance limits.
Object ESP: finding things, not just people
This is the feature FiveM players use most. Every prop in the world — every crate, safe, plant, bag, door and hidden stash — is an entry in the object pool with a model hash identifying what it is. Object ESP lets you scan the session, which lists every distinct model currently loaded, and whitelist the ones you want to see. From then on those objects are drawn through walls at any distance. On RP servers that means drug labs, weapon caches, money bags, lockpicked cars, whatever the server's scripts spawn as a prop; on GTA Online it means pickups and mission objects. The whitelist is saved to your config, so once you have mapped a server's props you never have to scan again.
The player list
The network player table gives one row per person in the session: name, server ID, health, distance from you, and what vehicle they are in. The cheat shows it as a live list you can sort and filter, which is the fastest way to see who is near, who is hurt, and whether the person who just pulled up is a player or an NPC in a police skin.
Device aimbot and triggerbot
The aimbot is an angle calculation: from your camera's position and angles and the target bone's position there is one yaw and pitch that puts the crosshair on it, and the difference from where you are looking is the delta to move. On a read-only cheat that delta cannot be written into the game, so it goes through an input device instead — a KMBox Net or B+, MAKCU, Ferrum, Arduino or Teensy. Your mouse plugs into the device, the device plugs into the gaming PC as your mouse, and the second PC sends it corrections that it emits as genuine HID mouse movement merged with your own. Smoothing splits each correction into small steps and FOV limits the aimbot to targets near your crosshair, so the tracking looks like a hand.
The triggerbot casts a ray along your view direction and tests it against enemy hitboxes; when it lands, it sends a click through the same device, after an adjustable delay. It is instant in the sense that it reacts the tick the crosshair arrives — the delay is there so you can make it look less so.
Which device? MAKCU and Ferrum are the most common picks; the KMBox guides (Net, B+ Pro) cover the alternatives, and Teensy or Arduino boards work as well.
Web Menu and cloud configs
The second PC hosts the cheat's menu as a web page on your LAN. Open it in any browser — the second PC's own, a phone, a tablet — and every setting is there, so you never need to alt-tab on the gaming PC. Configs are saved to the cloud and follow your license to any install, and the community config browser lets you pull a setup another player has tuned for the server you are on, including their object whitelist.
Why the anti-cheats do not see it
You are dealing with three layers, and a DMA setup slips past all of them for the same reason.
- FiveM's client anti-cheat looks for injected DLLs, modified game files, mod menus and known cheat signatures inside the FiveM process on the gaming PC. There is nothing there: no DLL, no hook, no process, no file changed.
- Server-side anti-cheat scripts watch what your character does — impossible speeds, spawned vehicles, weapons you should not have, money appearing, native calls a normal client would never make. A read-only cheat never triggers any of those, because it never makes your character do anything a normal player could not.
- BattlEye on GTA Online, and the client anti-cheats in RageMP and AltV, are kernel-level scanners of the gaming PC's processes, drivers and memory access. Memory is read by the DMA card over PCIe, not by any program they can enumerate, and aim arrives from a device that identifies as your mouse.
The only part of the setup any of them can inspect is the DMA card's identity on the PCIe bus. Stock firmware is blacklisted; 1:1 emulated firmware answers every probe as a harmless real device would. Keep it current and the hardware is invisible too.
What actually gets people banned on FiveM. Almost never detection — it is admins. Roleplay servers have staff spectating, and a player who beams every head through walls, tracks people through buildings and drives straight to every hidden stash gets noticed and banned by a human. Use the ESP to know, not to show off; keep FOV and smoothing believable; and remember that on RP servers the aimbot is the least useful feature you own.
Setting it up
The setup guides cover the practical side, in this order: prepare the second PC, connect your input device (KMBox Net, KMBox B+ Pro, or the MAKCU / Ferrum quick-start pinned in Discord), optionally flash a Fuser for single-monitor play, and keep the troubleshooting page open for the first launch. The full hardware list — two Windows 10/11 PCs, a DMA card with undetected firmware, an input device, an optional Fuser — is on the product page.
Frequently asked questions
Is the FiveM DMA cheat undetected?
It never runs on your gaming PC — the second machine reads memory through the DMA card, so FiveM's client anti-cheat finds nothing injected, server scripts see nothing impossible, and BattlEye on GTA Online has no process to scan. The card's firmware identity is the only inspectable part; keep it emulated and current. Admin spectating and obvious play are the real risks.
Does it work on every FiveM server?
Yes. Servers can pin different game builds, and the cheat detects the build and loads matching offsets automatically. It also covers GTA Online, RageMP and AltV, because all of them run the same GTA V underneath.
Can it spawn cars, money or weapons?
No, by design. Fave DMA only reads memory: ESP, Object ESP, the player list, aimbot and triggerbot. Writing to the game is what server anti-cheats catch instantly, so the cheat never does it.
What is Object ESP for?
Every prop in the session is an object with a model hash. Scan the session to list them, whitelist the ones you care about — stashes, crates, plants, lockpicked cars, mission items — and they are drawn through walls from then on. The whitelist saves with your config.
Which input device do I need for the aimbot?
Any of KMBox Net or B+, MAKCU, Ferrum, Arduino or Teensy. ESP, Object ESP and the player list need only the DMA card; the device is for aimbot and triggerbot.
What happens when Rockstar or FiveM updates?
The auto updater ships new offsets as soon as they are ready, usually with no downtime. Because nothing is installed on the gaming PC, there is nothing on your side to reinstall.
How much does it cost?
€7.50 per week, €15 per month, €40 per quarter or €125 for lifetime, with a discount for crypto. The license is delivered the moment payment clears.