Yes, a verified game on Steam called Orbital Strike reportedly stole a total of $150,000 from the Steam Wallets of several hundred players. The game, which passed through Steam’s verification process, was removed from the platform in September 2025 after a flood of user reports and evidence of malicious activity came to light. The developers have since vanished, and Valve is investigating the massive security breach.
Been a wild month for PC gaming, hasn’t it? After sinking countless hours into just about every genre on Steam, you think you’ve seen it all. But a verified title pulling off a six-figure heist is a whole new level of chaos. Let’s break down what happened.
What Was the ‘Orbital Strike’ Steam Scam?
Orbital Strike was marketed as a top-down sci-fi shooter with rogue-lite elements. It looked generic but competent, passing Steam’s initial verification checks and launching with a small discount. However, its real purpose was to act as a sophisticated wallet-draining operation. Players who purchased and installed the game found their Steam Wallet funds mysteriously disappearing within hours. The total damage is estimated at over $150,000, affecting hundreds of accounts before the game was finally taken down.
How Did This “Game” Steal So Much Money?
The scheme was both simple and devious. The game’s code included a malicious script that exploited Steam’s API. When players booted up Orbital Strike, the game would request what appeared to be standard permissions. In reality, it was gaining access to make micro-purchases on the Steam Community Market. The script would then buy hundreds of low-value items from bot accounts controlled by the developers, quickly and quietly draining the victim’s wallet balance in small, hard-to-track increments.
How Did a Verified Trojan Horse Get on Steam?
This is the million-dollar question. Steam’s verification process is meant to catch malware and blatant scams, but it’s not foolproof. The developers of Orbital Strike likely submitted a “clean” build of the game for verification. Once approved, they pushed a malicious update disguised as a minor patch or hotfix. This is a classic bait-and-switch tactic, and it slipped right past Valve’s automated checks.
What Is Valve Doing About It?
Valve’s response was swift once the reports gained traction. They immediately removed Orbital Strike and its developer from the platform, effectively nuking them from orbit. They also issued a security warning and are reportedly in the process of investigating the transactions. While they haven’t made a formal announcement on refunds, historically, Valve has often stepped in to restore funds in cases of widespread, fraudulent activity.
Who Were the Developers Behind This Heist?
The developer, “Starlight Interactive,” appears to be a ghost. The name was registered just weeks before the game’s launch, their website is a barebones template, and their social media profiles were fakes. They have completely vanished since the scam was exposed, leaving no real trail. It’s a harsh reminder that anyone can hide behind a convincing studio name.
Red Flags: How to Spot a Scam Game on Steam
After spending thousands of hours on the platform, I’ve learned to spot the signs. Look for brand-new developers with no history or other games. Be wary of games with generic art, vague descriptions, and an unnaturally low price point for the features promised. Most importantly, check the community discussions. If you see multiple threads about suspicious activity or bugs, stay far away.
Can You Get Your Stolen Steam Wallet Funds Back?
The chances are good, but not guaranteed. Your first step should be to contact Steam Support immediately and report the unauthorized transactions. Provide as much detail as possible. Given the scale of this scam, it’s highly likely Valve will perform a mass reversal of the fraudulent market transactions, but it will take time. Don’t expect your money back overnight.
Is Steam Still Safe After This?
Yes, Steam is generally safe. This was a sophisticated attack that exploited a loophole in the update process. However, it’s a critical wake-up call. Always be cautious. Don’t install games from unknown developers without doing some research first, and consider enabling additional security features on your Steam account, like two-factor authentication. A little paranoia goes a long way.
Follow The Updates
Join AnimeNextSeason on Twitter, Facebook, or BlueSky for every update, or subscribe to our free weekly newsletter for the latest from, gacha and anime.
Get our top stories straight to your inbox.