Is creating and selling "cheats" or "hacks" for games illegal?

Question

I sell game hacks for a living, but wanted to learn more about the laws regarding what I do.

Most of you probably haven't heard of this, but there are people like me who reverse engineer games, and make software that exploit the games code and memory in order to gain an advantage.

Basically, we have to reverse games to know where the game stores different information, like your players health, position, and weapon. Reverse engineering involves taking an executable you get when you buy the game, and seeing where the code stores information.

Based on this information, you can make a program to access the information you found while reversing, and modify it to give you an advantage.

I've only read some stuff on the DMCA, but I am unsure if this qualifies for it. Most games have an "anti-cheat" which try to detect people who use cheats and ban them from the game. As a cheat developer, you have to bypass these counter measures, and sometimes these counter measures are present in the executable in the form of packing / obfuscation which just makes it harder to analyze.

If I take information from an executable given to me since I bought a game, and make a game cheat based on the information then sell, is this illegal?

If you have any questions, let me know. I live in the United States.

Answer 1

Yes

The relevant legal concepts are copyright, contract law and the Computer Fraud and Abuse Act. You are liable to be sued by the people affected for damages and/or be prosecuted by the government for the felony under either or both laws.

Let's start here: "I bought a game". No, you didn't; you bought a licence to use the software in accordance with the terms of service (licence) that you freely agreed to. All modern ToS will not allow you to reverse engineer the software.

If you breach those terms of service then you have broken a contract - that is what allows them to sue you. They will no doubt argue that the prevalence of cheat routines developed by people like you reduce the number of people willing to play the game - say 100,000 users x $10/month * 12 months = $12,000,000. They will also ask the court to impose punitive damages to discourage this sort of thing.

Which brings us to the copyright violation. You are allowed to copy their software provided you comply with the ToS. But you didn't. Therefore you are in breach of the Copyright Act and subject to additional civil and criminal sanctions.

Finally, your "cheats" access their servers in a way that the ToS doesn't authorize. This puts you in breach of the CFFA - breaking this carries serious jail time penalties. Not to mention that in the US, a criminal conviction will preclude you from many jobs, including, naturally, any with access to company computer systems.

Putting aside the illegalities, cheats are unethical and ruin the game experience for hundreds of thousands of people who don't use cheats.

You are a criminal - stop being one!

Answer 2

This appears to be criminal infringement. I'm going to try to point to the places in the law that make this illegal, step by step.

17 U.S. Code § 106 - Exclusive rights in copyrighted works says:

Subject to sections 107 through 122, the owner of copyright under this title has the exclusive rights to do and to authorize any of the following:
(2) to prepare derivative works based upon the copyrighted work;

The definition of a derivative work is here:

A “derivative work” is a work based upon one or more preexisting works, such as a translation, musical arrangement, dramatization, fictionalization, motion picture version, sound recording, art reproduction, abridgment, condensation, or any other form in which a work may be recast, transformed, or adapted. A work consisting of editorial revisions, annotations, elaborations, or other modifications which, as a whole, represent an original work of authorship, is a “derivative work”.

This seems to apply to what you're doing - you're modifying the original work to create a new one.

According to 17 U.S. Code § 501:

Anyone who violates any of the exclusive rights of the copyright owner as provided by sections 106 through 122... is an infringer of the copyright

Since you don't have permission to create a derivative work (and don't seem to qualify for an exception like fair use), you're infringing the owner's exclusive right to do this. You are therefore officially infringing.

Not all infringement is criminal - but it appears yours is. 17 U.S. Code § 506 - Criminal offenses says:

In general.—Any person who willfully infringes a copyright shall be punished as provided under section 2319 of title 18, if the infringement was committed—
(A) for purposes of commercial advantage or private financial gain;

You say you're selling it, so almost certainly it's for private financial gain, and I can't describe your infringement as anything but willful. So you appear to qualify for criminal charges, if the federal government felt like prosecuting you.

If you look at 18 U.S. Code § 2319, you can see the penalty is as follows:

Any person who commits an offense under section 506(a)(1)(A) of title 17—
(1) shall be imprisoned not more than 5 years, or fined in the amount set forth in this title, or both, if the offense consists of the reproduction or distribution, including by electronic means, during any 180-day period, of at least 10 copies..., of 1 or more copyrighted works, which have a total retail value of more than $2,500;
(2) shall be imprisoned not more than 10 years, or fined in the amount set forth in this title, or both, if the offense is a felony and is a second or subsequent offense under subsection (a); and
(3) shall be imprisoned not more than 1 year, or fined in the amount set forth in this title, or both, in any other case

So, on a first offense, it's up to 5 years in federal prison assuming you're doing at least 10 copies and $2500 worth of infringing software per 180 days, and up to 1 year in federal prison if you're doing less business than that.

Answer 3

When you talk about creating a "cheat" or a "hack" for a video game you could be talking about a myriad of different things, which is what I assume has confused the other posters into giving incorrect and misguided information in response to your question (especially surrounding the negative stigma of the word hack in the legal field).

I will answer under the assumption that you are talking about creating and selling a bot for a video game, and not hacking into a video game server or stealing and selling game currency.

Let's discuss this under US law and make a few assumptions, which is what I assume you mean by a game cheat. By making these assumptions we can avoid a lengthy discussion on topics such as wire fraud, money laundering, racketeering, etc.

It is my understanding the common commercial cheat has the following:

• A standard bot to automate some behavior eg an aimbot and features to enhance visuals (coloring enemies through walls, adding textual information, a radar).
• The bot runs on your computer
• The bot acts as an accessory program to the game. Users must still hold a valid license of the game to use it, eg, no piracy is involved.
• You are selling the bot

Let's examine the law

Derivative Work

• As per Lewis Galoob Toys Inc v. Nintendo of America Inc the cheat would not incorporate any copyrighted work in any concrete or permanent form. It would be a computer program consisting of it's own algorithms and instructions with copyright belonging to it's author. Hence, it would not be considered a derivative work.

Copyright Infringement

• As per MDY Industries, LLC v. Blizzard Entertainment, Inc the cheat would not be liable for copyright infringement because the End User License Agreement's clauses which prohibit cheating would be considered contractual covenants and not license conditions. Hence, it would not be considered copyright infringement or contributory copyright infringement.

Computer Fraud and Abuse Act

• As per MDY Industries, LLC v. Blizzard Entertainment the license conditions prohibiting cheating would be considered contractual covenants so we would still be accessing the game server within our authorization. Several courts have ruled similarly: Terms of Service cannot be used to determine what access is considered unauthorized. Even more, the DOJ has stated so in their own press release here, page 3.

DMCA Anti-circumvention

• If the game has no anti-cheat, then there are no violations.
• If the game has an anti-cheat, it must control access to the server (what would be called the dynamic non-literal elements in the MDY case) and upon detecting your cheat it should block access immediately to the server. If the anti-cheat implements any kind of delayed banning mechanism (delayed as in days or weeks, not minutes or hours), it would most likely not be considered an effective measure hence I would argue there would be no circumvention.
• If the game does have an anti-cheat that blocks access immediately to the server and you have circumvented this by modifying your cheat to unblock it after it has been blocked then the infringement must also be willful: Typically you would be warned and told to stop and made aware that your actions of selling the cheat are harmful. Ignoring this warning and continuing to sell your cheat and continuing to unblock it from the anti-cheat would be considered willful infringement.
• If the above point holds, the outcome is not clear because there is a circuit split between the Ninth Circuit (MDY Industries) and the Federal Circuit (Chamberlain I and II). I am not aware of any criminal charges being made ever in the United States for DMCA Anti-Circumvention violations where there is no direct nexus between copyright infringement and anti-circumvention (as in this case)- and the fact that there is a circuit split on this very matter makes me believe we won't see any unless the laws change. But it is clear under Ninth Circuit jurisdiction you would be liable for civil remedies.

Civil Remedies

Without expanding into this too much, many game cheat developers have been made to pay large amounts of money in court.

Conclusion

Will you face criminal penalties? No. Will you be sued in court for obscene amounts of money and lose? Absolutely.

My advice? Don't sell cheats. These companies have huge legal teams and you will probably go broke from lawyer fees before you even step in court.

Answer 4

To be clear - they are selling a software. They are not 'reselling' a modified version of the game. Which is why anti-cheat measures are in place. They are selling their own product which is capable of modifying a game while playing it. Selling a cheat isn't illegal. You are not breaking the ToS if your not the one using it. The EULA is by definition END USER license agreement. The consumer purchases the cheat they are breaking their own EULA. If I am to take a game and resell it for my own personal financial gain than yes thats copyright. But if I am selling my own software that just so happens to be able to incorporate itself into their software. Thats a simple ToS breach by the END USER.

Answer 5

I have to disagree with the accepted answer here. It missed an important part of the DMCA concerning united-states reverse engineering.

This is legal.

I don't think much of people who cheat in multiplayer games, nor do I have a high opinion of people who sell these hacks... But making the hacks is not a breach of contract due to a loophole created by the DMCA.

Long winded explanation

It is illegal to reverse engineer software if that is against the onerous terms of service you sign when you install it. And all software (excepting FOSS) have language against reverse engineering their software (spoil sports).

But, there is an exception to that rule. If we pull up the relevant sections of the DMCA:

(f) Reverse Engineering.— (1) Notwithstanding the provisions of subsection (a)(1)(A), a person who has lawfully obtained the right to use a copy of a computer program may circumvent a technological measure that effectively controls access to a particular portion of that program for the sole purpose of identifying and analyzing those elements of the program that are necessary to achieve interoperability of an independently created computer program with other programs, and that have not previously been readily available to the person engaging in the circumvention, to the extent any such acts of identification and analysis do not constitute infringement under this title. (2) Notwithstanding the provisions of subsections (a)(2) and (b), a person may develop and employ technological means to circumvent a technological measure, or to circumvent protection afforded by a technological measure, in order to enable the identification and analysis under paragraph (1), or for the purpose of enabling interoperability of an independently created computer program with other programs, if such means are necessary to achieve such interoperability, to the extent that doing so does not constitute infringement under this title. (3) The information acquired through the acts permitted under paragraph (1), and the means permitted under paragraph (2), may be made available to others if the person referred to in paragraph (1) or (2), as the case may be, provides such information or means solely for the purpose of enabling interoperability of an independently created computer program with other programs, and to the extent that doing so does not constitute infringement under this title or violate applicable law other than this section. (4) For purposes of this subsection, the term 「interoperability」 means the ability of computer programs to exchange information, and of such programs mutually to use the information which has been exchanged.

So if you are reverse engineering a piece of software for the purpose of transferring information to/from another piece of software (say a cheat engine). Then that reverse engineering is being performed for the express purpose of interoperability, as such it is legal according to the DMCA. (Note, this legal loophole is something that I am aware of because reverse engineering ancient software so that I can write a communication interface between it and something else, is something that I have done. And the lawyers said it was legal).

I don't like cheat engines and think they make many games not fun (I am only referred to cheat engines for competive games, I don't care a feather or fig about MMOs).

So from that perspective. This is not in violation... That being said a lot of games have TOS against cheating, and technically this is creating a program whose sole purpose is to help an individual break the TOS. It is a dark grey area.