Cyber Incident Victim: FIFA Ultimate Team
Date:
Nov 2016
Location:
United States of America
Summary
A US individual faced felony wire fraud charges for conspiring to steal and resell in-game currency from a sports video game's Ultimate Team mode. The scheme involved automatically generating virtual coins used to purchase player cards within the game, which were then sold for real-world money through unauthorized platforms. These coins, normally earned through gameplay or purchased legitimately, facilitated the creation of custom teams and were tradable among users, enabling their illicit external monetization.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 0 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In November 2016, Anthony Clark faced felony wire fraud charges in the Northern Texas District Court for conspiring to steal and resell in-game currency from EA Sports' FIFA Ultimate Team mode. The scheme involved the automated generation of FIFA coins, the virtual currency used to purchase player cards that allow gamers to build custom football squads in the PlayStation and Xbox versions of the game. These coins are typically acquired through gameplay achievements like winning online matches or purchased legitimately through EA's platforms. Clark allegedly bypassed these acquisition methods by creating an automated system to illegitimately generate coins, which were then funneled to unauthorized third-party black market websites. These platforms facilitated the exchange of virtual coins for real-world currency, violating EA's terms of service. The operation exploited the game's currency trading mechanics, which permitted peer-to-peer transfers between user accounts.
The theft impacted FIFA Ultimate Team's in-game economy by introducing illicitly obtained currency, undermining legitimate players' progress and EA's revenue streams from microtransactions. The conspiracy charge specifically cited violations of wire fraud statutes due to the interstate electronic transmission of fraudulently obtained assets. No details regarding EA's internal detection methods or containment actions were disclosed in the charging documents. The legal complaint highlighted the black market's role in monetizing virtual assets, with Clark's operation representing a documented instance of exploiting game mechanics for financial gain. Consequences were limited to criminal proceedings against Clark, with no publicized remediation efforts by EA or disclosures regarding the scale of financial losses or affected user accounts. The case underscored persistent security challenges surrounding tradable virtual currencies in online gaming ecosystems.