Click Adventure

⚠️This article has been marked as incomplete. Sourcing or verifiability needs additional work.

In particular:

1. limited to a single primary source (Sentinels of the Store); no mainstream coverage exists

A moderator needs to check the page before this notice can be removed. Visit the noticeboard or the #appeals channel in either Zulip or Discord to request removal.

More info ▼

Articles must provide verifiable, credible evidence for their claims and avoid relying on forum posts, personal blogs, or other unverifiable sources. You can help by replacing weak citations with reputable reporting, corporate communications, receipts, repair logs, or independent investigative coverage that demonstrates the systemic relevance required by the Mission statement and Moderator Guidelines.

Click Adventure was a fake Steam game used to drain wallet funds from pre-compromised user accounts through the Steam Community Marketplace. Published by "Folso Dev" on August 6, 2025, the game served as a vehicle for laundering stolen funds; around 25 users reported unauthorized transactions totaling roughly $830 before Valve removed the game on September 12, 2025. Valve denied all refund requests from affected users.

Background

The consumer rights group Sentinels of the Store, run by investigator MellowOnline1, uncovered the scheme in September 2025. Their report found that the compromised accounts hadn't been hacked through the game itself; the accounts had been compromised months earlier, then stockpiled for use in the laundering operation. One victim's account had been compromised as early as December 2024, about 8 months before Click Adventure launched.

Click Adventure was a bare-bones clicker game where players clicked to uncover locations & loot. Its SteamDB page shows a peak of 4 concurrent players before removal.

Wallet drain mechanism

The scam operated in two steps using networks of pre-compromised "seller" & "buyer" accounts:

1. The operator used compromised "seller" accounts to list worthless Click Adventure inventory items on the Steam Community Marketplace. Each item's price was set to match the exact balance in a specific victim's wallet.
2. The operator then used compromised "buyer" accounts to purchase those items, transferring funds from the victim's wallet to the seller accounts.

Individual losses ranged from $13 to $205. Discussions in the Sentinels community indicated up to 25 total cases; the full count is unknown because not all victims filed reports.

Victims consistently reported that they didn't own Click Adventure & hadn't interacted with it before receiving emails about marketplace purchases tied to the game's inventory items. The transactions didn't trigger Steam Guard alerts because the accounts had already been compromised; the attacker maintained persistent access without triggering new login notifications.

Developer analysis

Folso Dev had no prior history on Steam beyond Click Adventure, and the SOTS investigation noted the name sounds like "false dev." No verifiable social media presence, support contacts, or external website exists for the entity outside automated Steam database crawlers.

The earliest wallet drain reports appeared after Click Adventure's August 6 release but before a second build was pushed on September 12, 2025, the same day Valve banned the game. The Sentinels investigation concluded that the developer had been accumulating compromised accounts for months before creating the game as a marketplace laundering vehicle.

Prior Steam marketplace fraud

Click Adventure wasn't the first time Steam's marketplace was exploited for fund laundering. In 2021 & 2022, similar schemes used cheap or fake games to create marketplace items for transferring stolen wallet funds. MMO Fallout documented a pattern of fraudulent Steam games operating the same basic model: create a game, list worthless items at inflated prices, & use compromised accounts to complete the purchases.

Valve's response

Valve removed Click Adventure from the Steam store after user reports, but didn't provide refunds or compensation to affected users. Steam Support denied all reimbursement requests even though the developer had already been banned by the time victims sought refunds.

The Steam Subscriber Agreement places responsibility for account security on the user:

"You are responsible for the confidentiality of your login and password and for the security of your computer system."

Valve denied refunds despite the compromised accounts being used to purchase items from a game distributed through Valve's own storefront.

Community response

MellowOnline1 launched a GoFundMe campaign on September 18, 2025, to reimburse affected users for their stolen wallet funds.

The incident received no coverage from mainstream gaming outlets. All documentation of the scheme comes from the Sentinels of the Store investigation & associated community discussions.