Is a Steam trade offer that seems too good to be true a scam?
Almost certainly yes. Overly generous Steam trade offers are used to trick you into accepting deals that steal your valuable items through API hijacking or social engineering.
Last reviewed: 1 August 2026
Explanation
Steam trading scams exploit the platform's item trading system. Common variants include: impersonation of a friend whose account was compromised (they send a generous offer to build trust, then ask you to trade valuable items 'back' as a test), API key theft (scammers steal your Steam API key through phishing, intercept and cancel legitimate trades, and replace them with fake trades that send items to the scammer), and scam sites that ask you to 'verify' your inventory through a fake login.
The API key variant deserves particular attention because it defeats visual checking. Once a phishing site has captured your key, an automated bot watches your account; when you set up a genuine trade, the bot cancels it and instantly recreates a near-identical offer to an account impersonating your trading partner's name and avatar. You confirm what looks like the trade you built, and the items go to the scammer. This is why an unexplained cancelled trade followed by an immediate duplicate should stop you cold.
Before accepting any trade, verify the request verbally with your trading partner through a separate channel — not through Steam messages, which can be hijacked — and check that the item offered is actually the item shown rather than a lookalike with a slightly different name. If you have ever logged into a third-party skin or trading site, assume your API key may be exposed: revoke it, change your password, and review your confirmations before trading anything valuable.
Common red flags
- Friend's account suddenly sends an unusually generous trade offer
- Trading partner becomes defensive or aggressive if you ask to verify by voice
- Trade item names or appearances are very similar to valuable items but slightly different
- You are directed to a third-party site to 'verify' or 'confirm' the trade
What to do now
- Verify any trade offer with the trading partner through a separate channel
- Revoke your Steam API key if you suspect it has been compromised
- Check your Steam account for any unrecognised trades or sign-in activity
- Report the incident to Steam Support
Frequently asked questions
How do I revoke a compromised Steam API key?
Go to steamcommunity.com/dev/apikey and click 'Revoke My Steam Web API Key'. Then change your Steam password and enable Steam Guard mobile authenticator.
My trade was cancelled and an identical one appeared seconds later. What happened?
That pattern is the signature of API key hijacking — a bot cancelled your real trade and substituted one to an impersonator account. Do not confirm it. Revoke your API key, change your password, and rebuild the trade from scratch after verifying your partner.
Will Steam return items I was scammed out of?
Valve's policy is generally not to restore scammed items, which is why prevention matters so much. Still report the accounts involved — bans limit the scammer's ability to cash out and protect other traders.