FBI Gamer Alert: Several games on Steam have been used to steal data and cryptocurrency. Victims are invited to complete an official form to help the investigation.
“The FBI believes the attacker primarily targeted users between May 2024 and January 2026. As part of the investigation, more games have been identified, including BlockBlasters, Chemia, Dashverse / DashFPS, Lampy, Lunara, PirateFi and Tokenova.
If you and/or your dependent minors have been victimized by installing one of these games or have information relevant to this investigation, please complete this short form .
If you know of anyone else who may have been victimized, please encourage them to submit a request to [email protected]“, the FBI writes on its website.
While none of them belong to major franchises, some have already made headlines for malware incidents.
One of the most famous cases was PirateFi, a free-to-play game that appeared on Steam on February 6, 2024.
According to various reports, the header included malicious code designed to steal account credentials and other personal information.
The game was removed by Valve a few days after its release, although by then it had already been downloaded by hundreds of users.
In many cases, the malware was able to steal passwords and session cookies, allowing attackers to access victims’ accounts.
Another title that generated a lot of attention was BlockBlasters, a 2D platformer released in July 2025. A month later, a component designed to steal cryptocurrency from victims was added to the game.
According to further investigation, the malware present in the game managed to steal approximately $150,000 from several affected accounts.
The FBI explains that by law it must identify victims of federal crimes it investigates because they may be entitled to certain services, financial compensation or legal protection.
“The FBI is mandated by law to identify victims of federal crimes it investigates. Victims may be eligible for certain services, restitution, and rights under federal and/or state law. Your answers are voluntary, but may be helpful in the federal investigation and to identify you as a potential victim. Based on the answers you provide, you may be contacted by the FBI and asked to provide additional information. All victims’ identities will be kept confidential“, notes the institution.
Although games with malware are rare on Steam, this case demonstrates that security incidents can occur even on very popular platforms.
