Steam Trade Link Hijack Scam Impersonating the Steam Brand
Scammers replicate Steam's login pages and trade interface closely to trick users into handing over credentials or session access under the guise of official Steam trading tools.
Part of: Steam Trade Link Hijack Scam
Last reviewed: 5 July 2026
Steam's real trading system, complete with trade links, Steam Guard mobile confirmations, and a distinctive interface, gives brand-impersonation scammers a well-known visual and functional template to copy closely enough that victims believe they're interacting with actual Steam infrastructure.
How this scam works on the Steam brand
Fake sites replicate Steam's login page, trade offer screen, or Steam Guard mobile confirmation prompt closely enough that a user rushed by a time-limited trade or giveaway offer doesn't notice the URL isn't actually steamcommunity.com. Entering credentials or approving a fake Steam Guard prompt on these sites hands the scammer full account access, which is then used to drain the victim's item inventory through real trades executed from the compromised account itself, making the theft appear as a normal, self-initiated trade from Steam's own perspective.
Because Steam's actual brand carries such strong trust within the gaming community — many users have used it for years without incident — a well-copied impersonation site or Discord bot claiming Steam affiliation can bypass skepticism that an obviously unofficial-looking scam wouldn't overcome.
Common red flags
- A login page resembling Steam's isn't hosted on the actual steamcommunity.com or store.steampowered.com domain
- You're asked to approve a Steam Guard confirmation for an action you didn't initiate yourself
- A trading tool or bot claims official Steam affiliation without any verifiable connection to Valve
- The page or bot pressures immediate action tied to a limited-time trade or giveaway
- Visual details like fonts, logos, or layout are subtly different from the real Steam interface
- You're asked to enter your Steam password anywhere other than the official Steam client or website
How to protect yourself
- Only log into Steam through the official Steam client or by typing steamcommunity.com directly
- Never approve a Steam Guard mobile confirmation for a trade or login you didn't personally initiate
- Bookmark the official Steam site to avoid relying on search results or shared links
- Verify any third-party tool's claimed Steam affiliation independently before using it
- Enable Steam Guard and review your account's recent trade history regularly for unauthorized activity
- Report and avoid bots or sites that closely mimic Steam's branding without verifiable official status
How to report it
- Report the impersonating site or bot to Steam Support directly through the official Steam website
- Report to Discord if the impersonation occurs through a server bot
- Report to the FTC at reportfraud.ftc.gov if items or funds were lost
- File a complaint with the FBI's IC3 at ic3.gov for significant losses
Frequently asked questions
How can I verify I'm on the real Steam login page?
Check that the URL is exactly steamcommunity.com or store.steampowered.com, and only ever log in through the official Steam client or by typing the address directly rather than clicking a link.
What should I do if I approved a Steam Guard prompt I didn't initiate?
Change your Steam password immediately, review your account's trade and login history for unauthorized activity, and contact Steam Support to report a compromised account.