A controversial free-to-play web3 game, PirateFi, was abruptly removed from Steam after reports surfaced that it contained “malicious files” capable of compromising users’ systems. The removal follows an alarming notification from Valve, warning players that their computers could be at risk.
Valve Issues Security Warning
According to SteamDB, a platform that tracks Steam-related data (via PC Mag), players who had downloaded PirateFi were informed that the game’s developer uploaded builds containing suspected malware. As a precaution, Valve advised affected users to either perform a full-system antivirus scan or completely reformat their operating systems to eliminate any potential threats.
This warning is particularly troubling given Steam’s reputation as a secure distribution platform. A security breach of this nature raises concerns about how Valve assesses and verifies games before they are published.
Suspicious User Reviews and Fake Engagement
The Steam reviews for PirateFi suggest a concerning trend. Initially, the game received a small wave of positive reviews, but most came from accounts with under two hours of playtime. While some of these accounts were not brand new—typically a sign of legitimacy—the later influx of negative reviews paints a different picture.
Many of the negative reviews came from fresh accounts, alleging that PirateFi stole their data, drained their Steam wallets, and even used stolen assets from another pirate-themed game. This suggests that accounts compromised by the malware may have been used to artificially inflate the game’s positive ratings before victims realized what had happened.
Fraudulent Hiring and Inflated Player Numbers
Further investigations by PC Mag uncovered that a Telegram user named Jose Andres had been offering individuals $17 per hour to moderate the PirateFi community. However, as part of the onboarding process, applicants were required to download the game, suggesting that the job offer was merely a scheme to increase PirateFi’s player count.
Despite claims that the game had attracted over 7,000 players, SteamDB analytics tell a different story. The game’s peak concurrent player count never exceeded five. Data from Gamalytic estimates that PirateFi had approximately 800 downloads, while VG Insights suggests the total may have been as high as 1,500—a far cry from the supposed 7,000.
Steam’s Response and Take Down
After being available on Steam for six days, PirateFi was removed from the platform on February 12. Valve’s swift action, combined with their direct warning to players, underscores the severity of the situation. However, the case raises broader concerns about how fraudulent and potentially harmful games continue to make it onto the storefront despite Valve’s moderation efforts.
For those who downloaded PirateFi, it is strongly advised to follow Valve’s recommendations and run a full antivirus scan or consider reformatting their system to ensure no lingering malware remains.
