Steam Trade Link Hijack Scam Impersonating the Steam Brand
Scammers replicate Steam's login pages and trade interface closely to trick users into handing over credentials or session access under the guise of official Steam trading tools.
Part of: Steam Trade Link Hijack Scam
Last reviewed: 5 July 2026
Steam's own trading system, with trade links and Steam Guard mobile confirmations, is familiar and trusted, which is exactly what makes a faithful copy dangerous. Fake sites replicate the login page, trade screen, or Guard prompt closely enough that a user rushed by a time-limited giveaway or trade never notices the address is not actually steamcommunity.com. Credentials or an approved fake prompt hand over the whole account, and the inventory is then drained through real trades the account itself appears to initiate. The distinction that matters most: the interface can be forged perfectly; the domain in the address bar cannot.
How this scam works on the Steam brand
Fake sites replicate Steam's login page, trade offer screen, or Steam Guard mobile confirmation prompt closely enough that a user rushed by a time-limited trade or giveaway offer doesn't notice the URL isn't actually steamcommunity.com. Entering credentials or approving a fake Steam Guard prompt on these sites hands the scammer full account access, which is then used to drain the victim's item inventory through real trades executed from the compromised account itself, making the theft appear as a normal, self-initiated trade from Steam's own perspective.
Because Steam's actual brand carries such strong trust within the gaming community — many users have used it for years without incident — a well-copied impersonation site or Discord bot claiming Steam affiliation can bypass skepticism that an obviously unofficial-looking scam wouldn't overcome.
Common red flags
- A login page resembling Steam's isn't hosted on the actual steamcommunity.com or store.steampowered.com domain
- You're asked to approve a Steam Guard confirmation for an action you didn't initiate yourself
- A trading tool or bot claims official Steam affiliation without any verifiable connection to Valve
- The page or bot pressures immediate action tied to a limited-time trade or giveaway
- Visual details like fonts, logos, or layout are subtly different from the real Steam interface
- You're asked to enter your Steam password anywhere other than the official Steam client or website
How to protect yourself
- Only log into Steam through the official Steam client or by typing steamcommunity.com directly
- Never approve a Steam Guard mobile confirmation for a trade or login you didn't personally initiate
- Bookmark the official Steam site to avoid relying on search results or shared links
- Verify any third-party tool's claimed Steam affiliation independently before using it
- Enable Steam Guard and review your account's recent trade history regularly for unauthorized activity
- Report and avoid bots or sites that closely mimic Steam's branding without verifiable official status
How to report it
- Report the impersonating site or bot to Steam Support directly through the official Steam website
- Report to Discord if the impersonation occurs through a server bot
- Report to the FTC at reportfraud.ftc.gov if items or funds were lost
- File a complaint with the FBI's IC3 at ic3.gov for significant losses
Frequently asked questions
Can Steam itself restore items lost through a fake Steam login page?
Steam doesn't automatically restore stolen items, but reporting a compromised account quickly through Steam Support may allow them to investigate and, depending on the situation, restore recently stolen items — contact them directly as soon as possible.
I noticed a trade I didn't make in my history — how urgent is this?
Very urgent — change your password immediately from a separate trusted device, revoke any active sessions in your account settings, and contact Steam Support right away, since delays reduce the chance of recovering any stolen items.
How can I verify I'm on the real Steam login page?
Check that the URL is exactly steamcommunity.com or store.steampowered.com, and only ever log in through the official Steam client or by typing the address directly rather than clicking a link.
What should I do if I approved a Steam Guard prompt I didn't initiate?
Change your Steam password immediately, review your account's trade and login history for unauthorized activity, and contact Steam Support to report a compromised account.