Zyaire Dontaevious Zamarion Wilkins, 21, of North Lauderdale, Florida, was arrested Tuesday on federal charges of conspiracy to obtain information by computer for private financial gain, accused of helping operate a scheme that embedded crypto-stealing malware into online video games. According to a 15-page FBI complaint, Wilkins and co-conspirators infected approximately 8,000 devices and compromised about 80 cryptocurrency wallets between May 2024 and February 2026, stealing at least $220,000. The charge carries a maximum sentence of up to 10 years in prison. The arrest represents the first known charge stemming from an FBI investigation into malicious games distributed on Steam, which the agency publicized in March after multiple titles—including PirateFi, BlockBlasters, Dashverse, and Lunara—were found to contain malware targeting cryptocurrency holders.
Malware Distribution Through Video Game Platforms
Wilkins and unidentified co-conspirators launched eight malware-laced games that were marketed across Discord, Telegram, X, and LinkedIn, according to the FBI complaint. The group used bots to identify users with large cryptocurrency holdings before directing them to download the games. Once installed, the malware harvested private data and login credentials, which the conspirators used to access victims' crypto accounts. The FBI complaint does not name the distribution platform, referring only to a "popular digital distribution software company," but the games listed match those flagged by the FBI's Seattle field office in a public Steam malware investigation earlier this year. The case is being prosecuted in Seattle, near the Bellevue, Washington headquarters of Steam owner Valve.
Investigators linked Wilkins to the handle "Sibel.eth," which he allegedly used to coordinate with an unidentified "primary developer" over the encrypted app Signal. According to the complaint, the two discussed running "draining campaigns" and tricking victims into approving transactions that instantly emptied their wallets. Wilkins purchased a "remote access trojan" for $10,000, agents said.
FBI Traces Bitcoin Transactions to Wilkins
Federal agents identified Wilkins by tracing Bitcoin from the scheme's wallet to Bitrefill, where it was spent on more than 150 gift cards—mostly for Uber Eats, according to the complaint. A subpoena to Uber linked those gift cards to an account with deliveries to Wilkins' home and to his University of West Florida addresses. When agents searched his North Lauderdale home the previous week, Wilkins refused to speak with them. They seized several devices and three wallet seed phrases—one for Monero, a privacy coin the agent described as "frequently used by criminals" because it is hard to trace. A review of his crypto history showed roughly $382,000 moving in and out.
Steam Malware Investigation Produces First Arrest
The arrest appears to be the first charge linked to the investigation the FBI publicized in March, when it asked gamers affected by malicious Steam titles to come forward. The games were approved for sale and appeared legitimate but installed info-stealers that scraped credentials and wallet data. PirateFi attracted approximately 7,000 players while posing as a free survival game before Valve removed it and urged users to reformat their computers. BlockBlasters, the most notorious title in the group, drained more than $32,000 from a streamer raising money for cancer treatment live on air last September—part of an estimated $150,000 taken from hundreds of users. Last month, researchers flagged malware embedded in Steam Workshop wallpapers targeting the same cryptocurrency-holding audience.
Wilkins was due in federal court in Fort Lauderdale on Wednesday. No timeline has been set for his transfer to Washington to face the charge.
FAQ
What did federal agents arrest Zyaire Wilkins for?
Federal agents arrested Zyaire Wilkins, 21, of North Lauderdale, Florida, on charges of conspiracy to obtain information by computer for private financial gain. He is accused of helping operate a scheme that embedded crypto-stealing malware into online video games, infecting approximately 8,000 devices and stealing at least $220,000 from about 80 cryptocurrency wallets between May 2024 and February 2026.
How did the FBI identify Zyaire Wilkins as a suspect?
The FBI traced Bitcoin from the scheme's wallet to Bitrefill, where it was spent on more than 150 gift cards, mostly for Uber Eats. A subpoena to Uber linked those gift cards to an account with deliveries to Wilkins' home and his University of West Florida addresses. When agents searched his home, they seized several devices and three wallet seed phrases, including one for Monero.
