Check the SHA-256 hash on the official website (if provided) or use antivirus scans. Avoid “modded” versions promising free credits.