Skip to main content

On Sale: GamesAssetsToolsTabletopComics
Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
TagsGame Engines

... so something that appears on some accounts. Mostly user accounts that do not publish anyway. Itch does have a verification system already. But they only use for very few accounts.

IP validation does not do much good. If Itch would react to reports within hours they might do something with that information for bulk uploads, but the scammers change IP a lot.

2fa does absolutely nothing here. Neither for new fake accounts, nor for older hacked accounts. And Itch does scan files, but their scanners are not up to the task. Again, if they react within hours and update their scanners within hours and scan older files ... that might do some good. The Itch scanners are so bad, I had downloaded files that even old Windows Defenders outright deleted without asking, so clear was the scan result. But then again, some malware I found did not even trigger a single scanner on virustotal. It is trivial for the bad uploaders to circumvent the Itch scanners by trial and error.

Believe me, I sure wish that there were some changes that would make spamming viruses and scams onto Itch a waste of time for the criminals. It makes me sick to see them every day. But the method you suggest would not solve this issue.

It would solve another issue, but only for long time users turned developers at that. As I said, the trust in the Steam platform is only, because they verify each developer. So to increase trust in Itch, there would need to be verification of all uploads. If you only attach a verified symbol to some few accounts in an automatic manner, those few accounts might be trusted a little bit more, till the criminals find ways to fake the verification process.