• Discounts and special offers
  • Subscriber-only articles and interviews
  • Breaking news and trending topics

Already a subscriber?

By signing up, you accept Moneywise's Terms of Use, Subscription Agreement, and Privacy Policy.

Not interested ?

Top Stories
Gamers play 100 Thieves on their computer consoles. Thomas SAMSON / AFP via Getty Images

A Florida man is accused of hiding crypto-stealing malware in Steam games. Here’s how the alleged scam worked

Downloading a free video game isn’t something most people associate with losing their life savings. But federal prosecutors say that’s exactly what happened to dozens of cryptocurrency holders after they unknowingly installed malware disguised as legitimate games.

Authorities have arrested a 21-year-old Florida man accused of helping operate a scheme that allegedly stole more than $220,000 in cryptocurrency from victims who downloaded infected games distributed through Steam, Valve’s popular PC gaming platform. According to court documents, the operation infected about 8,000 devices and compromised at least 80 cryptocurrency wallets.

Advertisement

The case highlights a growing threat for gamers and crypto investors alike: malware hidden inside seemingly harmless software that can quietly search a computer for passwords, wallet credentials and other sensitive financial information.

The money news that actually matters.

By signing up, you accept Moneywise Terms of Use, Subscription Agreement, and Privacy Policy.

How the alleged Steam malware scheme worked

Prosecutors allege Zyaire Wilkins, 21, worked with co-conspirators to develop and promote at least eight malware-infected games between May 2024 and February 2026. The titles named by the FBI include BlockBlasters, Chemia, Dashverse (also known as DashFPS), Lampy, Lunara, PirateFi and Tokenova.

The 15-page court complaint alleges the group promoted the games across Discord, Telegram, X and LinkedIn, encouraging users to download them. Once installed, prosecutors say the malware searched victims’ computers for sensitive information that could be used to access cryptocurrency wallets before draining digital assets.

Some of the games had already attracted attention before the arrest. Earlier this year, Valve removed several titles from Steam after reports that they contained malware. One game, BlockBlasters, was reportedly linked to more than $150,000 in stolen cryptocurrency, including funds belonging to a streamer who was raising money for cancer treatment.

Federal investigators say they identified Wilkins by tracing cryptocurrency transactions tied to an alleged co-conspirator. According to the complaint, investigators linked a crypto wallet to a Bitrefill account used to purchase more than 150 gift cards, including Uber Eats gift cards. Those purchases allegedly helped investigators identify a phone number and eventually an address connected to Wilkins.

Wilkins was arrested July 14 and charged with conspiracy to obtain information by computer for private financial gain. As with any criminal case, the allegations remain accusations, and Wilkins is presumed innocent unless proven guilty in court.

Must Read

Join 250,000+ readers and get Moneywise’s best stories and exclusive interviews first — clear insights curated and delivered weekly. Subscribe now.

How to protect yourself from malware disguised as games

While this case focuses on cryptocurrency, many types of malware are designed to steal a much wider range of personal and financial information.

Advertisement

You can reduce your risk by:

  • Download software only from trusted developers and verify publishers before installing new programs.
  • Be skeptical of links shared through Discord, Telegram and other messaging platforms, especially if they promise exclusive game access or early releases.
  • Keep your operating system, antivirus software and applications up to date so known vulnerabilities are patched.
  • Enable multi-factor authentication whenever possible, including on cryptocurrency exchanges and email accounts.
  • Never store cryptocurrency recovery phrases or private keys in plain text on your computer. Instead, consider using a hardware wallet or another secure offline storage method for significant holdings.

The FBI’s Internet Crime Complaint Center says investment and cryptocurrency-related fraud remains one of the fastest-growing categories of cybercrime, with Americans reporting billions of dollars in losses each year.

Cases like the alleged Steam malware operation are a reminder that scammers don’t always target victims through fake emails or phone calls.

Sometimes they hide inside software that looks like entertainment.

You May Also Like

Share this:
Clay Halton Associate Editor

Clay Halton is an associate editor at Money.ca, covering a wide range of consumer-focused financial stories. He has over eight years of experience in digital publishing and has written and edited for outlets including PCMag and Investopedia.

more from Clay Halton

Explore the latest

Disclaimer

The content provided on Moneywise is information to help users become financially literate. It is neither investment, tax nor legal advice, is not intended to be relied upon as a forecast, research or investment advice, and is not a recommendation, offer or solicitation to buy or sell any securities, enter into any loan, mortgage or insurance agreements or to adopt any investment strategy. Tax, investment and all other decisions should be made, as appropriate, only with guidance from a qualified professional. We make no representation or warranty of any kind, either express or implied, with respect to the data provided, the timeliness thereof, the results to be obtained by the use thereof or any other matter. Advertisers are not responsible for the content of this site, including any editorials or reviews that may appear on this site. For complete and current information on any advertiser product, please visit their website.

†Terms and Conditions apply.