Skip to main content

Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
TagsGame Engines
(1 edit)

Another tactic I have seen is these hackers would message people on other social media websites (Discord being a common one which I have seen this on) saying that they have just made a game they would like you to play and give feedback on, sometimes these Discord accounts are hacked accounts, sometimes it will be a friend of someone they have hacked which will ask them to play their game which helps the fake game look more legitimate and more trustworthy to download.

I believe the malware with this tactic typically targets Discord accounts instead of Itch accounts, although it could indeed target a lot more, either way it is another tactic to watch out for.

The thread below actually gives a lot more detail on this scam:
https://itch.io/t/1659440/psa-beware-the-try-my-game-scam

I have no intent of giving someone malware. The game I sent is a legit game. And if you dont feel safe downloading it, its even in web browser. 

I actually made this thread to point out that the "classical" try-my-game-on-discord-scam is not the only method used and give some general tipps. It is not necessary for the scammers to socially target people and distribute password protected links on Itch. They can just spam their projects in the open. I saw several times the original and a fake shown up in a search side by side. It is just sick. Only last week I saw a fake game aimed at children.

And itch is indexed on regular search engines quite fast. So de-indexing does not even help much. People can find the scam site by accident by googling some indie games.

This might also be the reason why there are so many fake blog posts on Itch. The scammers not only post projects, they post devlogs with links to malware in the guise of some game announcement. I saw such a fake account with over 40 followers. How ... what ... I cannot understand this.