FBI Busts Student for Using Fake Steam Games to Steal Cryptocurrency

TL;DR

• **FBI Arrest:** 21-year-old Florida student Zyaire Dontaevious Zamarion Wilkins was arrested on July 14 for creating fake Steam games containing malware to steal cryptocurrency.
• **Massive Impact:** The scheme infected roughly **8,000 devices**, compromised **80 crypto wallets**, and stole at least **$220,000** in digital assets between May 2024 and February 2026.
• **How He Was Caught:** Investigators tracked Wilkins using **Bitcoin blockchain data** and over **150 Uber Eats gift cards** he purchased with stolen crypto, a slip-up that led federal agents directly to his home.

The Scheme: Fake Games, Real Malware

Federal agents have dismantled a sophisticated cryptocurrency theft operation that relied on the trust of gamers on one of the world's largest digital distribution platforms. Zyaire Dontaevious Zamarion Wilkins, a 21-year-old student from North Lauderdale, Florida, was arrested and charged with conspiracy to obtain information by computer for private financial gain.

Wilkins was the financier and operator behind a scheme that disguised crypto-stealing malware as legitimate video games. The games, which included titles like BlockBlasters, Dashverse, Lunara, and PirateFi, appeared completely normal to users, a tactic that allowed the group to infect thousands of devices without immediate detection.

Once installed, the malware bypassed standard security measures to extract private data and passwords from the victim's device. The group then used this stolen information to access and empty cryptocurrency wallets, bypassing the security protocols that typically protect digital assets.

Scale of the Damage

The reach of this operation was extensive, targeting a wide audience across social media platforms. The group marketed the malicious titles aggressively on Discord, Telegram, X (Twitter), and LinkedIn, utilizing bots to identify and target individuals holding significant amounts of cryptocurrency.

According to a 15-page federal complaint, the scheme operated for nearly two years, from May 2024 to February 2026. The FBI reports that the malware successfully compromised approximately 8,000 devices worldwide. This infection led to the unauthorized access of roughly 80 cryptocurrency wallets, resulting in a confirmed theft of at least $220,000.

The impact was not limited to small-time investors; the malware previously targeted high-profile victims, including a streamer with cancer who lost $32,000 in a single incident linked to the game BlockBlasters.

The Uber Eats Slip-Up

What ultimately led to Wilkins' arrest was a seemingly mundane habit: ordering food. While the group used complex blockchain techniques to launder stolen funds, Wilkins made a critical error by using the stolen cryptocurrency to purchase Uber Eats gift cards.

Investigators traced the Bitcoin transactions related to the purchase of more than 150 Uber Eats gift cards on the platform Bitrefill. This digital trail allowed the FBI to link the alias "Sibel.eth" to Wilkins' real identity and physical location in North Lauderdale.

Federal agents executed the arrest on Tuesday, July 14, seizing the evidence that connected him to the financial gain of the malware operation. The Uber Eats purchase history served as the "smoking gun" that delivered him straight to the FBI.

Legal Consequences and Charges

Wilkins has been charged with conspiracy to obtain information by computer for private financial gain. This charge carries a maximum penalty of 10 years in prison if he is convicted.

Following his arrest, Wilkins appeared in federal court in Fort Lauderdale the following day. While a timeline for his transfer has not been confirmed, the case is being prosecuted in Washington, near Valve's Bellevue headquarters, where the platform hosting the fake games is located.

The arrest marks a significant victory in the FBI's ongoing investigation into Steam malware, which has flagged multiple malicious titles in the past. Wilkins is accused of financing the development of the malicious tools, obtaining the malware, and promoting the infected games that facilitated the theft.

Warning to Gamers and Investors

This case highlights the persistent risk of downloading software from unverified sources, even on reputable platforms. The FBI and cybersecurity experts urge users to be vigilant against:

• **Unknown games** with few reviews or suspicious developer profiles.
• **Promotional offers** in messengers or social networks promising free or exclusive content.
• **Files** that request unusual system permissions upon installation.

For cryptocurrency holders, the incident underscores the importance of using hardware wallets, enabling two-factor authentication, and never sharing seed phrases or private keys. If funds are stolen, victims should immediately contact their exchange support, save all transaction hashes and wallet addresses, and report the phishing sites to relevant cybercrime authorities.

AndroGuider Team

Articles written by the AndroGuider team. We try to make them thorough and informational while being easy to read.