Steam scams: how to spot them and keep your skins safe

CS2 skins are worth real money, so they attract scammers. Most scams don’t “hack” anything. They trick you into handing over access yourself. Here are the most common ones and how to protect yourself.

1. Fake Steam login pages

You get a link to a “tournament”, a “giveaway” or a “vote for my team”. The page asks you to sign in with Steam in a window that looks exactly like Steam, but isn’t.

How to protect yourself:

• Check the address bar: it must be exactly steamcommunity.com or store.steampowered.com.
• A login window you can’t drag outside the page is not a real browser window.
• Turn on the Steam Guard Mobile Authenticator. Without your phone, nobody can get into your account.

2. Stolen API key (the most dangerous one)

If a scammer gets your account’s API key, they can watch your trade offers in real time. When you send a skin, they cancel the real offer and instantly send a near-identical one from a copycat of the buyer’s account.

How to protect yourself:

• Check steamcommunity.com/dev/apikey regularly. If there’s a key you didn’t create, revoke it immediately and change your password.
• Before confirming a trade in the Steam app, check the name, avatar, level and account age of whoever is receiving the skin.

3. Fake Steam admins and “verification”

Someone tells you that you’ve been “reported” or that your skins need to be “verified”, then asks you to transfer them temporarily. Steam never does this. Valve employees don’t message you and never ask for skins.

4. Offers that are too good to be true

Someone wants to buy your skin above market price, but “through a middleman”, “after you send first” or on an unknown site. The simple rule: if you have to send first, it isn’t a safe trade.

5. Discord links

Messages like “someone gifted you skins” or “you got free Nitro” from friends usually come from accounts that are already compromised. Don’t click, even if you know the sender.

What to do if you’ve been scammed

1. Change your Steam password straight away and use “Deauthorize all other devices”.
2. Revoke any API key you didn’t create.
3. Report the scammer’s profile and open a ticket with Steam Support.
4. If the skin is still under trade protection (the 7-day hold), Steam may be able to reverse the trade. Act quickly.

When you buy skins, stick to well-known marketplaces and always check the site address. Every skin page on CSGO-Skins.ro links directly to verified listings.