Steam Trade Link Hijack Scam
Scammers trick players into sharing or approving a manipulated trade offer or trade URL, redirecting valuable in-game items or an entire inventory to an account they control.
Last reviewed: 5 July 2026
What this scam is
This scam targets players who trade cosmetic items, cards, or in-game assets through a platform's built-in trading system, most commonly associated with PC gaming marketplaces that use a unique trade URL or trade token to let other users send offers directly to an account. The scam manipulates either the trade link itself or the trade offer confirmation screen so that a trade the victim believes is fair, or believes they are only reviewing, actually transfers their items away for little or nothing in return.
Unlike simple scams that ask a victim to hand over a password, trade link hijacking exploits the legitimate trading feature of the platform itself, meaning the transfer often looks technically valid from the platform's point of view. This makes recovery far harder, since the platform sees a trade that both parties appeared to accept.
High-value cosmetic items, rare skins, and collectible cards make attractive targets because they can be resold on secondary markets, making the stolen items easy for scammers to convert to cash or other goods.
How it works
The scammer approaches a player in a trading channel, forum, or in-game chat, offering a trade that looks appealing — a rare item in exchange for several of the victim's lower-value items, or a straightforward item swap. To 'make the trade easier', the scammer asks the victim to share their trade URL rather than sending the offer through normal in-platform search, or asks the victim to click a link that opens what looks like the platform's trade offer screen.
In one common method, the link leads to a convincing fake copy of the trading site. The victim logs in or confirms a session there, unknowingly handing over session credentials or approving a trade offer that was altered behind the scenes to include far more of the victim's items, or all of them, rather than the one or two items originally discussed. Because the confirmation screen is manipulated to visually resemble the agreed trade, the victim may click 'accept' without noticing the item list has changed.
In a related method, the scammer sends a real trade offer through the platform but pads it with additional decoy items of trivial value on their side, hoping the victim skims the total number of items rather than checking each one individually, and accepts a trade that is heavily lopsided in the scammer's favor. Once accepted, most platform trading systems execute the transfer immediately and irreversibly, and the scammer moves the items on to other accounts or lists them for resale within minutes.
Why this scam works
Trading between players is a normal, expected activity on many platforms, so being asked to share a trade link or review an offer does not immediately register as suspicious. The visual similarity between a manipulated confirmation screen and a genuine one relies on victims trusting the interface rather than re-reading every line of an offer, especially when the trade was expected to be quick and friendly.
Urgency is also a common ingredient — scammers frequently claim the good item is only available for a short window, or that another buyer is waiting, pressuring the victim to confirm the trade quickly rather than double-checking the item list carefully. The technical legitimacy of the transaction, once accepted, means there is often no dispute process available comparable to a payment chargeback.
A typical pattern
The victim is offered a trade for a rare item they want, in exchange for several items of their own that together are worth less. The other trader asks for the victim's trade link to send the offer, then says there was an issue and asks the victim to click a link to 'refresh' or 'confirm' the trade instead. The victim clicks through and reviews what appears to be the agreed offer, but a wider set of items — sometimes their entire inventory — has been substituted into the trade. The victim, trusting the interface, confirms. The trade completes instantly and the scammer moves the items to another account before the victim realizes what happened.
Common red flags
- Trade partner asks for your trade URL instead of using the platform's normal offer system
- A link is sent asking you to 'confirm' or 'refresh' a trade outside the official app or site
- Pressure to accept quickly because the item or window is limited
- The item list on the confirmation screen does not exactly match what was discussed
- Trade partner pads the offer with many low-value decoy items
- Request to log in again on a page reached through a trade-related link
- New or low-reputation trading account offering an unusually good deal
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Send me your trade link and I'll send the offer over, easier than searching your username.
Trade didn't load right on my end, click this link to confirm it and it'll go through properly.
Only got a few minutes before I trade this to someone else, confirm fast so we don't lose it.
Double check your offer here [link] — looks the same as what we agreed, just confirm quickly.
My trade site is glitching, use this alternate link instead to finish the trade.
Common variations
- Fake site variant — link leads to a lookalike trading site that captures session credentials
- Padded offer variant — legitimate trade offer stuffed with decoy items to obscure an unfair ratio
- Refresh link variant — victim is told the trade needs re-confirming via an external link
- Middleman variant — scammer poses as a trusted third party 'holding' items during a trade
- Bot impersonation variant — automated account mimics a known trusted trader's profile
How to verify before you act
Before accepting any trade, read the full item list on both sides of the offer individually rather than trusting a summary or a screenshot the other party sent beforehand. Confirm the trade only within the platform's own official app or website, never through a link sent by another user, and never enter login credentials on a page reached via a link from a trade partner.
Check that the total number of items and their identities exactly match what was verbally or textually agreed before clicking any confirm button. If a trade partner urges speed, pressure, or claims a special circumstance for using an external link instead of the platform's normal offer system, treat this as a strong signal to stop and re-verify through the platform directly.
Payment methods used
- No direct payment — value is lost through item transfer rather than cash payment
Who is usually targeted
- Players with valuable rare or collectible in-game items
- Active traders on cosmetic item marketplaces
- Younger or less experienced traders unfamiliar with offer review habits
- Players eager to complete a trade quickly for a desirable item
What to do immediately
- Do not confirm any trade offer whose item list you have not personally reviewed line by line
- If a trade has already completed, report the trade to the platform's support immediately with the trade ID
- Change your account password and enable or review two-factor authentication
- Check active sessions and revoke any you do not recognize
- Contact the platform's fraud or trading dispute team to report the manipulated link
- Warn others in the same trading community about the specific account involved
How to prevent it
- Only send and accept trade offers within the platform's official app or website
- Read every item in a trade offer individually before confirming, never trust a summary
- Never click a trade-related link sent by another user to 'refresh' or 'confirm' anything
- Enable two-factor authentication and a trade confirmation delay if the platform offers one
- Be skeptical of any trade partner who pressures you to act quickly
- Check a trading partner's account history and reputation before high-value trades
- Keep your trade URL private and regenerate it if you suspect it has been misused
Evidence to preserve
- The trade offer ID and full item list from both sides
- Screenshots of the chat conversation leading up to the trade
- The exact link or URL that was sent, if any
- Timestamps of when the trade was proposed and confirmed
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Can a trade be reversed once it has been confirmed?
Rarely, and only at the platform's discretion in cases of clear fraud reported quickly. Most trading systems execute transfers immediately and treat a confirmed trade as final, so prevention through careful review is far more reliable than recovery afterward.
Is sharing my trade link itself dangerous?
A trade link alone typically only allows someone to send you an offer, not take items without your confirmation. The danger comes from confirming an offer without checking it carefully, or from clicking external links claiming to 'fix' or 'refresh' a trade.
What should I do if I already confirmed a manipulated trade?
Report it to the platform's support immediately with the trade ID, screenshots, and a description of what happened. Also secure your account with a password change and two-factor authentication in case credentials were also compromised.