Stay Safe Guide
The most common scam that happens to users is the typical “fake site” scam, where you’re asked to log in on a certain site with Steam, and when you enter your Steam details they’re sent to the scammer, giving him access to your Steam account.
Scam sites are spread everywhere, you can find them on Steam profiles, Steam group posts, workshop entries, chats, everywhere, scammers will do anything they can to send the link to as many people as possible.
How it works:
- You try to log in on their fake site and while doing that, you provide your account details to the scammer, giving him access to your Steam account.
- The scammer will now wait until you want to deposit or sell your items on any real site. Keep in mind this not only affects deposit you make on CSGOatse, this will affect you no matter where you’re depositing your skins.
- The scammer sees the incoming deposit offer on your account and automatically declines it. (This also applies for offers you send, instead of declining it, they will cancel it).
- Before you’re able to confirm the offer on your mobile device, the scammer will send you the exact same offer from an identical Steam account (with the same name and avatar) and automatically accept it.
- When you go to confirm the offer on your mobile, without noticing, you accept the scammer’s offer instead of the original one which has already been declined.
Keep in mind the scammer is not able to send the skins to himself without your help. They don’t have access to your mobile authenticator, only your account, they need you to confirm their fake offer on your mobile.
Here are a few things you can do to keep your account safe, as well as what to do if you’ve already been affected by this scam.
Things you can do to avoid being scammed:
- Keep Steam’s log in page on your browser’s bookmark (https://steamcommunity.com/login)
and ALWAYS use that
link to enter your account details. If you’re logged in on Steam, when you log in on a REAL site that uses
Steam to log in, it will look like this if you’re
asked to enter your Steam
details again, do NOT write them there, go to your bookmarks instead and use the link you previously saved.
If you’re still asked to enter your Steam details after doing that, that site is a scam, do NOT enter it at
This is useful not only for Steam but for everything you do on the internet, save your commonly used sites on your bookmarks, you’ll have a way better experience.
- Do not accept friend request from random users. The most common way scammers will send this link to you is via Steam chat. No matter what name they use, how many profile comments they have or what they tell you, do not add random users to your friend list. If someone tells you they’re doing a giveaway, or offer you a job, or want you to buy something for them or offer you free coins on a certain site, it is NOT real. Don’t click any link that you receive from people you don’t know.
- If you’re depositing an item on a site that provides you the bot’s creation date
(like we do on CSGOatse,
ALWAYS make sure you check the date given to you on the site matches both
the date you see on the Steam offer as well as on
the mobile confirmation,
if the dates do not match, do NOT accept the offer and cancel it
immediately as your Steam account is compromised. (It is common for the date to have a 1-day difference due
to time zones).
It is VERY important that you check the date on both the trade offer anf the confirmation on the Steam app, checking only the trade offer is NOT enough!
- Make sure you're logging in on a real Steam page by looking for the padlock on your browser's search bar that says Valve Corp.
- Common sense. This is the most important point and will keep you secure all the time. If something is too good to be true, it’s because it isn’t true. There’s no reason to enter your Steam details on a site if you’re already logged in on Steam (just click the green Sign In button). There’s no need to add random users to your friend list, their giveaway is not real, they won’t give you a job on that lovely site they say they own and they won’t give you a knife for your graffiti.
What to do if you’re already affected:
- Change your password. First of all, change your Steam password (keep in mind if you’re not logged in when you do this, you will receive a 2-day trade cool down). If you use the same password on any other site, it’s recommended to change these passwords as well, as the scammers have access to some of your personal information including user name, email, address, last digits of credit cards, phone number, etc.)
- Deauthorize all devices that have used your Steam account. You can do that by going here (https://store.steampowered.com/twofactor/manage) and pressing "Deauthorize all other devices"
- Revoke your Steam API key. Go to your Steam API key page (https://steamcommunity.com/dev/apikey) and press "Revoke My Steam Web API Key"
Hopefully this helps you understand how the scam works and some learn some safety steps you can make to secure yourself on the internet. If you’ve already been affected by this, it’s very important that you read everything so you know what to do to make sure it doesn’t happen again.
As always, if you have any questions or concerns about anything, you can reach out to us through the site by clicking “SUPPORT”
You can read the image version instead here.