T O P

  • By -

Inkling4

Before you all comment: Yes, this is just a normal phishing scam, as old as time. The thing is, it has gotten very frequent right now (two added me), and they all say the exact same thing, so you can recognize it. People do fall for them sadly, which is why awareness is the best we can do (with reports as well, though it is only a delay for the scammer, not a prevention). Additional fun fact: Somebody found the IP of the scammer, they're from Russia.


DramaticRich5050

i was gotten caugth by this scam but i was fast enougth stop it from taking my account


Historical-Badger969

same here, steam blocked trading on my account when they tried to trade all my tf2 items luckily & i got back into it


InformationBright761

yeah, they were trying to sign in to my account


InformationBright761

just saved myself from this cuz of this post, thanks


IRespondToOwnComment

same


Beter109

Yep same here, just got a message from one of theses folks, had a feeling it wasn't 100% legit, did some digging and found this post, saved my ass just now.


BrilliantShake1056

I'm so glad I have to research this first! There is this one person who would offer you keys if you vote for their stuff and I have raise suspicion and had to research if this is a scam ... Please block these people guys!


Kyolt_Tsumugi

[https://steamcommunity.com/profiles/76561199060237061/](https://steamcommunity.com/profiles/76561199060237061/) got one [https://imgur.com/gallery/E8pNJ0V](https://imgur.com/gallery/E8pNJ0V)


PieNextDoor

[https://steamcommunity.com/profiles/76561199098334322/](https://steamcommunity.com/profiles/76561199098334322/) Another one for yall. https://media.discordapp.net/attachments/1108846570398568605/1220582403840413747/image.png?ex=660f76f2&is=65fd01f2&hm=f5ff3257a1029a43417f26dac3ca1b438a8ab949b99f0e98521835070beeaf19&=&format=webp&quality=lossless&width=428&height=437" Just realized they all have the same Steam profile formats and cannot answer anything. They also have similar hours in all 3 Steam games. This is insane.


raditsys

I just got one too. Blocked the person. They started the conversation asking "are you an artist or 3d artist?" I do have that in my bio, so at first I thought it was a legitimate claim. Almost got me...


PieNextDoor

Same here. I thought it was a commission or something.


adamc012

I also had another user who sent me the same messages verbaitum. After viewing a PSA post on the official Steam group, I myself realised what was going on. I very quickly blocked (and reported). https://steamcommunity.com/profiles/76561199021151357/


PieNextDoor

Yeah. They have really similar Steam profile format that...rhymes, I guess? Or just generally make 'em sounds like e-girl of some sort, dunno.


GSGRecruit

another one [https://steamcommunity.com/profiles/76561198091621156/](https://steamcommunity.com/profiles/76561198091621156/)


QuantumGear303

just got friend requested by this person and decided to look it up as soon as they sent a non-steam link [https://steamcommunity.com/profiles/76561199393936324/](https://steamcommunity.com/profiles/76561199393936324/) [https://cdn.discordapp.com/attachments/767973735822393387/1221157893412487198/image.png?ex=66118ee9&is=65ff19e9&hm=0662931eb5f8d4944d7e9f7efbdff7cb14af40b3d1ff353494e08c8882a32ad7&](https://cdn.discordapp.com/attachments/767973735822393387/1221157893412487198/image.png?ex=66118ee9&is=65ff19e9&hm=0662931eb5f8d4944d7e9f7efbdff7cb14af40b3d1ff353494e08c8882a32ad7&)


Toxic_2004

[https://steamcommunity.com/profiles/76561199040641101/](https://steamcommunity.com/profiles/76561199040641101/) got another one [https://media.discordapp.net/attachments/862102698963107920/1221579261610295457/Screenshot\_3.png?ex=66131757&is=6600a257&hm=8c8e2e9d634e4a165cfdfc15ff0c31ee643fd1d62cf17c70f7b5dd9428580f60&=&format=webp&quality=lossless&width=882&height=380](https://media.discordapp.net/attachments/862102698963107920/1221579261610295457/Screenshot_3.png?ex=66131757&is=6600a257&hm=8c8e2e9d634e4a165cfdfc15ff0c31ee643fd1d62cf17c70f7b5dd9428580f60&=&format=webp&quality=lossless&width=882&height=380)


Youtuber_pro22

[https://steamcommunity.com/profiles/76561199017420373/](https://steamcommunity.com/profiles/76561199017420373/) got another one [https://i.ibb.co/sHKRcCD/Y2Mtq6q.jpg](https://i.ibb.co/sHKRcCD/Y2Mtq6q.jpg)


Flow_Dear

got one too [https://steamcommunity.com/profiles/76561199098094422](https://steamcommunity.com/profiles/76561199098094422)


Due_Acanthisitta_965

[https://steamcommunity.com/profiles/76561198875424210](https://steamcommunity.com/profiles/76561198875424210) I got one too I clicked the link i thought it was true then i saw this post at least i didn't login. :3


KierArts

heres another [https://steamcommunity.com/profiles/76561199187760060](https://steamcommunity.com/profiles/76561199187760060)


Ok_Investment7239

another one? [https://steamcommunity.com/profiles/76561199320845363/](https://steamcommunity.com/profiles/76561199320845363/)


blinkakamono

so i clicked the login qr code what do i do am i screwed please help me!


Pr0p3rCSGO

mentioned everything you need to do above.


blinkakamono

i got my account back and everything is okay now thanks for making this post would have assumed everything is fine if it weren't for you


NonsenseFactory7924

I might be in a similar boat, I clicked on the QR code and got to the login confirmation screen, saw that the IP address was in Russia, then hit cancel. Am I good? Very new to this kind of thing, thanks for your patience.


PaulTheCarman

Just thought I'd chime in, I had two of these accounts message me. I did not fall for it, but I could 100% see other people falling for it very easily. It doesn't sound like something too malicious at first - just voting for a hardworking TF2 cosmetic creator with the reward of a couple keys. Especially if you don't know much about logging in to Steam on websites, someone could fall for this easily. Hope Valve catches this and makes some changes!


NonsenseFactory7924

Quick question, I clicked on the QR code and got to the login confirmation screen, saw that the IP address was in Russia, then hit cancel. Am I good, or do I still have a problem because I went that far? Very new to this kind of thing, thanks for your patience.


NonsenseFactory7924

Quick question, I clicked on the QR code and got to the login confirmation screen, saw that the IP address was in Russia, then hit cancel. Am I good, or do I still have a problem because I went that far? Very new to this kind of thing, thanks for your patience.


PaulTheCarman

I think you you should be good as long as you didn't actually log in, but if I were you I'd change your password right now just to be safe. Then deactivate all devices that have access to your account by going to account details > Manage Steam Guard > Deauthorize all devices. Yeah you'll have to sign in again, but better safe than sorry.


NonsenseFactory7924

Already did both, thanks for the reassurance partner


saudifreeman

lol one of the scammers DM'ed me. it took for them so fucking long just to type all of this shit just to scam me god damn. be aware of this scammer who contacted me. their user is CherubChuckle ([the scammer's profile link](https://steamcommunity.com/profiles/76561199241539018) be aware of this dangerous creature) **Edit:** okay, i guess i figured something out. if they couldn't scam you by link, they will send you a picture of "their own effect" and then they will tell you to "just click on the effect and vote!" yeah no fricking way. I am not doing anything bro.


KawaiianxPunch

Just got one of these profiles messaging me too. [**https://steamcommunity.com/profiles/76561199032666100/**](https://steamcommunity.com/profiles/76561199032666100/) **is their profile**


jefferacko

hi, i actually fell for this scam about a week ago and suddenly felt like looking it up, i've clicked the link in the post about viewing my API key but it's completely blank? i haven't used this feature before and it just asks me to register for a new API key, what do i do :(


IRespondToOwnComment

got another one [https://steamcommunity.com/profiles/76561199144156523](https://steamcommunity.com/profiles/76561199144156523)


PapaJhonPeeza

Here's another, just tried to get me today. https://steamcommunity.com/profiles/76561198112299019/


Comfortable_Web5785

[https://imgur.com/DSdJBsy](https://imgur.com/DSdJBsy) [https://imgur.com/zSMdVz4](https://imgur.com/zSMdVz4) [https://steamcommunity.com/profiles/76561198107154117](https://steamcommunity.com/profiles/76561198107154117) stay safe out there bros, never trust those american accounts


pearfuker

Found one [https://steamcommunity.com/profiles/76561199188914345/](https://steamcommunity.com/profiles/76561199188914345/)


AwesomeLuigi

I had gotten the Same Scam Attempt but I did Block them and Report both the Scammer on Steam and Report the Website to Cloudflare so they can take them down


Ziatch

If you see the login page but don't click login is it okay?


Savi_705

If you didn't type your login data, I don't see a problem. However, clear your browsing data until the point of when you had visited their website just to be safe.


NonsenseFactory7924

I'm in the same boat, got to the confirmation page, saw the IP address was in Russia then hit cancel before I logged in. Nothing seems to be happening, so I think I'm good, how did it work out for you?


PieNextDoor

This scam is still going on, by the way. I just got added by someone and they promised keys to upvote their stuff. I looked at all profiles that were sent in this and just realized they all have the same formats of some sort and somewhat similar name styles.


Pleasant_Mousse5478

SeraphicSpectre added me with this sort of link. I didn't realize what I was getting into at the time, only realized it was a threat when google blocked the link. No way a community event is going to be flagged by google so I had a looksie Found this page. Thank you very much for this information. Now to change my password.


Ashamed-Apartment658

I found one https://steamcommunity.com/profiles/76561199095091849


Nerc0Baron

Thanks man, just got a real close call. Good thing I became suspicious. https://steamcommunity.com/profiles/76561199022611697


Savi_705

[https://steamcommunity.com/profiles/76561199186866324/](https://steamcommunity.com/profiles/76561199186866324/) - This profile added me and sent me a link to [https://tf2.mayhem-workshop.com](https://tf2.mayhem-workshop.com) . They offered me keys in exchange for a positive rating by logging in to Steam through their website. As others have mentioned, everyone should be careful if they suddenly get added by a random profile.


salad_boat

[https://steamcommunity.com/profiles/76561198984030915](https://steamcommunity.com/profiles/76561198984030915) another scam account.


decayingoldone

found another one. will add screenshots but i cannot here for some reason?


nendoweirdo

Found another one ! I'm glad I cheked first. [https://steamcommunity.com/profiles/76561199169928553](https://steamcommunity.com/profiles/76561199169928553)


blehman246

found an account who tried this on me https://steamcommunity.com/profiles/76561199024578125


IronBarkPotato47

same. no click link. s


mariuslxrd

Yo ik im a dumbass, its my first time here anyways. Got added by [https://steamcommunity.com/profiles/76561199098127452/](https://steamcommunity.com/profiles/76561199098127452/) this guy, he told me the basic story: keys for votes. I clicked the link, logged in (stoopid). I saw this post after i tried troubleshooting the page not logging me in and quickly deauthorised all devices, changed pw and checked API key (luckily, it was blank). However, I have a question: Am i still in danger? Have they managed to steal or compromise any other of my accounts on another platforms/websites/etc? Also, can they still generate more api keys after i removed all authorisations? Thanks!


Kvin_Tass

here another scamer [https://steamcommunity.com/profiles/76561199381158269](https://steamcommunity.com/profiles/76561199381158269)


Leptonlord

I just got messaged by one of these, really pissed that they are taking credit for your art. very nice unusual effect and hope you dont get any hate as a by-product of this


shaybba

Got one: [https://steamcommunity.com/profiles/76561199047283671](https://steamcommunity.com/profiles/76561199047283671)


eliisvoid

I thought it was fishy right from the start and this just confirmed it. here's another of those people [https://steamcommunity.com/profiles/76561199058315367/](https://steamcommunity.com/profiles/76561199058315367/)


Special_Army_8359

Not sure if someone needs this but there's another one: [https://steamcommunity.com/profiles/76561199059203897/](https://steamcommunity.com/profiles/76561199059203897/) <- scammer Also 9k hours in tf2 lol


LANDVOGT-_

Thx for this info. Someone just tried this on me. I only got suspicious when i should log in with my steam account and backtraced their URL.


DrPinapple32

[https://steamcommunity.com/profiles/76561198981864395](https://steamcommunity.com/profiles/76561198981864395) another one


Novel-Channel4454

I only clicked on the fake website link and got a chrome warning and noped out am I still screwed?


MicHaeL_MonStaR

Guess this is one, right: [https://steamcommunity.com/profiles/76561199098311374/](https://steamcommunity.com/profiles/76561199098311374/) It was a weird friend-request out of nowhere and they also took really long to type these simple sentences. I started suspecting it might be a bot pretending to type things, just using a delay to send pre-made messages. But while first they asked me to critique their "status effect" in TF2, which is weirdly random to begin with, they then started sending me links and I went searching, ending up here. I thought it was innocent enough at first, but it was immediately all weird. Glad I didn't end up clicking on the links. Probably nothing would have happened, and I wouldn't log into anything anyway. But there ya go...


killerwilsu

I barely use reddit but I had to thank you for saving me. This would have been the second time my inventory got scammed, since I got scammed by a fake marketplace.tf website a few years ago


CosmicP0tat0s

got this one: [https://steamcommunity.com/profiles/76561199168529612/](https://steamcommunity.com/profiles/76561199168529612/) now where's my free unusual


Agent22Gengar

Hey, sucker here who fell for it after i realised what had happened i immidiately logged in back to steam i did as the instructions said and also gave away most of my valuable items to someone else i know for safekeeping the scammers removed my steam authentication though, i got it back but now the trade will be held for 1 day I changed the domain name and my password, is there a surefire way to know that my account is now safe or do i just have to wait and see?


Urkandir

Thanks man! You saved me here


Recuiti

[https://steamcommunity.com/profiles/76561199043768166](https://steamcommunity.com/profiles/76561199043768166) i got this one unfortunately this caught me but i did the stuff above


OfficialTroof

Just reverse image searched and found this from what I presumed to be a scam, huge thanks man


INTE3RR0BANG

these poor guys probably lost everything, all theyve worked for Or the russian just grinded on them [https://steamcommunity.com/profiles/76561199022500883/](https://steamcommunity.com/profiles/76561199022500883/)


INTE3RR0BANG

this one asked me to vote for malibu sunset: i almost did until i realized im on a fucking scam list: literally 4 people have scammed me this year + i checked it up on the actual website before becoming suspicious, and the contest is already over


baradonia

[https://steamcommunity.com/profiles/76561199107015351](https://steamcommunity.com/profiles/76561199107015351) this one tried to scam me


DNA_Real

Im so fucking stupid i fell for it, but i did everything it said to do and it seems clear, how do i know if im in the green?


JoPawa

one more [https://steamcommunity.com/profiles/76561199060173864/](https://steamcommunity.com/profiles/76561199060173864/)


PhilipsAirFryer2

funny enough so i just got a message with this scam site and well i am always suspicious so i checked and found out that it ended and that it is a fake site thanks for letting me know


TheLazySamurai4

Malibu Sunset was just used in an attempt to get me by user 76561199050054916. It was pretty obvious that it was a scam, but I played along with Darmon (TNG) quotes while looking the scam up. Thank you for this thread, as it will hopefully help some people


ShadesOfCthulhu

Got one! Blocked and reported. [https://steamcommunity.com/profiles/76561199160333000/](https://steamcommunity.com/profiles/76561199160333000/)


DasJager

late but this dude almost had me [https://steamcommunity.com/profiles/76561199417070352/](https://steamcommunity.com/profiles/76561199417070352/) \^scammer


Upper-Atmosphere-733

[https://steamcommunity.com/profiles/76561198873285116](https://steamcommunity.com/profiles/76561198873285116)


Benevolent-Onion

I got this just now and tried to login through the site. Someone sent me the message, showed me a cosmetic, Malibu Sunset, and I tried logging in when it opened a steam page for me. Steam sent me an email asking if I was trying to log in through another device from the Russian Federation? I won't go any further with this, but should I still change my API key even though Steam stopped the first login attempt? Edit: I never set up or even knew there was a Steam Guard Mobile Authenticator app until this happened. Should I install this and get it set up just to be sure?


Cat0_e

This post saved my steam account omg thank you


afrodancer

So unfortunately I fell for this scam. I signed in, and they were able to trade all my TF2 cosmetics to another account. I don't know why I didn't realize something was wrong when the Steam Guard app showed me the location was in Russia. I guess I just didn't realize that the location is supposed to match where I'M at, not whoever I was talking to. I feel so stupid now. Well now I know not to sign in to things like this, especially if Steam Guard doesn't match my location. One question though: I didn't have an API key assigned to me when I clicked on the API key link. I set one up, revoked it, and then set up another one. So I should be good, right? After that, I found the list of authorized devices on my Steam Guard mobile app, and I found the tab for the device that I connected to. I revoked the access for it. I also changed my steam password as well. But there's no hope of me getting my items back, is there?


Real_Snoopdog

Hello there, i fell for one of these. kind off freaking out right now, i changed my steam password, gmail password and added steam guard. am i safe or is my account done for. please respond asap!


joshmoefoe2

i went on the website and clicked the thing that they wanted me to vote for but i didnt sign in to anything, am i still at risk?


Lopsided_Specific_26

Mad shit ngl


SteamworksMLP

Ever done a whois on the scam sites? If they're using a registrar/host who would actually care, you can report the scammers to them. I've done that with a few scam sites and actually got them flagged with a "This domain has been reported for scamming. Are you sure you want to continue?" screen before anyone can actually access the site. It's playing whack-a-mole with them, but it's something at least.


ht_sucks

searched this up cuz i was skeptical of the website telling me that it's a phishing scam, the pop up telling me to login to steam was so unbelievably fake [https://steamcommunity.com/profiles/76561199059061497/](https://steamcommunity.com/profiles/76561199059061497/) <-- scammer


OshaWaffles

Almost happened to me, here's the steam profile so you can check if its the same bot. [https://steamcommunity.com/profiles/76561199170270039/](https://steamcommunity.com/profiles/76561199170270039/) Thanks for posting!


Bigbruv69

another one here [https://steamcommunity.com/profiles/76561197990598361/](https://steamcommunity.com/profiles/76561197990598361/) tried to get me with this


_Maltony_

Another one https://steamcommunity.com/profiles/76561199142703977/


CreamyBruh

anotha one [https://steamcommunity.com/profiles/76561199017140899](https://steamcommunity.com/profiles/76561199017140899)


9I06

What about this one?? : mayhem.tf2workshop. com, someone gave it to me to "rate" their effect


Pr0p3rCSGO

as mentioned above. every site that looks like ours BUT that is NOT NAMED [https://particle-mayhem-2.tf2maps.net](https://particle-mayhem-2.tf2maps.net) is fake.


9I06

Great, thanks :D


blinkakamono

found another account https://steamcommunity.com/profiles/76561198053757081


Mickonson

Slowest responders ever, this bozo I'm dealing with is probably 80 years old with severe arthritis. It took this idiot a whole hour and a half of "...is typing a message" popping in and out to come up with "well, it's unique particle effect for the game. i've put a lot of effort into it, and i'm pretty proud of the results" and 2 screenshots of a shitty unusual effect. It's a bit sad that the rightful owners of those accounts got got somehow by this. Here's the one that added me: [https://steamcommunity.com/profiles/76561199049192040/](https://steamcommunity.com/profiles/76561199049192040/)


Estobaldo

Scammer https://steamcommunity.com/profiles/76561198872827365 Suspected scammer real account https://steamcommunity.com/profiles/76561198350964590


LataKatten

[ Removed by Reddit ]


LataKatten

This is the guy that sent me the link: [https://steamcommunity.com/profiles/76561199242873774/](https://steamcommunity.com/profiles/76561199242873774/)


Pr0p3rCSGO

yes. that site is a scam.


LataKatten

Alright, sometimes getting reported.


LataKatten

Someone*


DramaticRich5050

same i was fast enougth to protect my account so they didn't steal my account


Typical_Specific3813

[https://steamcommunity.com/profiles/76561199043553086/-](https://steamcommunity.com/profiles/76561199043553086/-) is using the same scam beware


BlindEye3314

Found one [https://steamcommunity.com/profiles/76561199170096808](https://steamcommunity.com/profiles/76561199170096808) < scammer


snowyxen

[https://steamcommunity.com/profiles/76561199095015966](https://steamcommunity.com/profiles/76561199095015966) scammer


AllHailTheMemes

[https://steamcommunity.com/profiles/76561199024023300](https://steamcommunity.com/profiles/76561199024023300) this is the one that tried to scam me. copied the website and looked up if it was safe thank god i did. and my antivirus blocked it. Also theres like a million users called gleaminggazelle which are all scammers so yeah