US Federal Authorities Arrest Florida Man Over $220,000 Steam Crypto Theft
Investigation into eight titles on the Valve-owned platform reveals a scheme that infected approximately 8,000 devices between May 2024 and February 2026.
Federal authorities have arrested 21-year-old Zyaire Wilkins in Florida, charging him with conspiracy to obtain information by computer for private financial gain. The arrest follows an investigation into a scheme involving eight malware-infected games distributed on the Steam platform, which allegedly drained at least $220,000 in cryptocurrency from 80 wallets.
According to a legal complaint filed in a Washington court, where Valve is based, Wilkins and co-conspirators launched the malicious software between May 2024 and February 2026. The malware is accused of infecting approximately 8,000 devices, granting the perpetrators access to private information and cryptocurrency holdings.
The titles implicated in the complaint include BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova. Authorities allege the group promoted these games via social media and messaging platforms such as Discord, Telegram, X/Twitter, and LinkedIn, encouraging users to download the software.
Wilkins was identified after federal agents obtained a cryptocurrency wallet address from messages with an alleged co-conspirator. Investigators traced this address to a Bitrefill account, which was used to purchase more than 150 gift cards, including Uber Eats vouchers. This financial trail allowed authorities to uncover Wilkins’ phone number and physical address, leading to his arrest on July 14.
This incident echoes previous reports regarding cryptostealing games on the platform. Last year, several outlets reported that Steam removed titles such as BlockBlasters, which had previously stolen more than $150,000 from victims, including a streamer raising funds for cancer treatment. Local news outlet Local10 had previously reported on the FBI’s call for victim information regarding the "Steam malware investigation."
Valve did not immediately respond to a request for comment regarding the arrest. The complaint does not explicitly state that the games were uploaded directly to Steam, but the reference to the platform and the Washington filing strongly suggest the involvement of the Valve-owned ecosystem.
Wilkins now faces charges related to the conspiracy, marking a significant enforcement action against cybercriminals exploiting gaming infrastructure for financial theft. The case highlights the ongoing risks associated with third-party game distribution and the methods used by law enforcement to trace digital assets back to physical identities.
