WARNING: DO NOT AGREE TO VOTE ON A SKETCHY WEBSITE!

[Falcon 7]

Just got this one person asking me to help him "vote", and he sent me a link. I got suspicious so I used a dummy alt account and tried it. Steam blocked the login because the login location doesn't match and I can see it's from Russia. The site seems to be newly registered too, less than a week, I think. If someone tells you to vote something for him/her and send you the link, DO NOT.

[Supafly]

This won't help. Hundreds and thousands of users never read these PSA just like they don't read the pinned threads and other warnings. Most don't even read these after they fall for them. This will end up dead and buried like all the other PSA.

Glad you didn't fall for it

[Falcon 7]

Originally posted by Monkey:

This won't help. Hundreds and thousands of users never read these PSA just like they don't read the pinned threads and other warnings. Most don't even read these after they fall for them. This will end up dead and buried like all the other PSA.

Glad you didn't fall for it

It's okay, at least some people can use this as reference before clicking it. The website is very new and there's no mention about it anywhere so I just want to take it out for someone who's willing to do research.

[Supafly]

Originally posted by Falcon7:

Originally posted by Monkey:

This won't help. Hundreds and thousands of users never read these PSA just like they don't read the pinned threads and other warnings. Most don't even read these after they fall for them. This will end up dead and buried like all the other PSA.

Glad you didn't fall for it

It's okay, at least some people can search for reference before clicking it. The website is very new so I just want to take it out somewhere.

You do realise that you are actually advertising the site by having it in your post? You could remove all references to the site specifically and keep it as an open warning to that type of process and then your warning would be good for multiple sites not just the one.

[Falcon 7]

Originally posted by Monkey:

Originally posted by Falcon7:

It's okay, at least some people can search for reference before clicking it. The website is very new so I just want to take it out somewhere.

You do realise that you are actually advertising the site by having it in your post? You could remove all references to the site specifically and keep it as an open warning to that type of process and then your warning would be good for multiple sites not just the one.

So I just remove the site name then?

[Falcon 7]

OK, I've removed the reference. I don't know if the scammer will change the tactics but this is the best title I can think of for now.

[J4MESOX4D]

Really old and common type of scam. Many users fall for this especially when they are baited outside of Steam on sites such as Discord. As ever, it goes back to the common sense element of not giving away your credentials to a random 3rd party site/login regardless of how it's dressed up.

[Supafly]

Originally posted by Falcon7:

So I just remove the site name then?

Yup

Originally posted by Falcon7:

OK, I've removed the reference. I don't know if the scammer will change the tactics but this is the best title I can think of for now.

They won't. It's been a common tactic for years now. Sites name and username may change but the rest remains the same. There will be hundreds if not thousands of threads just like this one that are buried in the forum somewhere.

[Falcon 7]

Originally posted by Monkey:

Originally posted by Falcon7:

So I just remove the site name then?

Yup

Originally posted by Falcon7:

OK, I've removed the reference. I don't know if the scammer will change the tactics but this is the best title I can think of for now.

They won't. It's been a common tactic for years now. Sites name and username may change but the rest remains the same. There will be hundreds if not thousands of threads just like this one that are buried in the forum somewhere.

Ah, it's fine. But thanks for the advice anyway.

[Falcon 7]

Originally posted by Monkey:

Originally posted by Falcon7:

So I just remove the site name then?

Yup

Originally posted by Falcon7:

OK, I've removed the reference. I don't know if the scammer will change the tactics but this is the best title I can think of for now.

They won't. It's been a common tactic for years now. Sites name and username may change but the rest remains the same. There will be hundreds if not thousands of threads just like this one that are buried in the forum somewhere.

Does account reporting works on Steam btw?

[Cathulhu]

Yes, it does.

[Supafly]

Originally posted by Falcon7:

Originally posted by Monkey:

Yup


They won't. It's been a common tactic for years now. Sites name and username may change but the rest remains the same. There will be hundreds if not thousands of threads just like this one that are buried in the forum somewhere.

Does account reporting works on Steam btw?

If Valve can find evidence to back it up yes. That's why the smarter scammers like doing things via non Steam platforms like Discord. Steam can't access chat logs and stuff so it's harder to prove things.

Doesn't hurt to try though.

[Falcon 7]

Originally posted by Monkey:

Originally posted by Falcon7:

Does account reporting works on Steam btw?

If Valve can find evidence to back it up yes. That's why the smarter scammers like doing things via non Steam platforms like Discord. Steam can't access chat logs and stuff so it's harder to prove things.

Doesn't hurt to try though.

That smelly scammer did it on Steam, should work then. Thx

[Mysticales]

I was hit with this last night and since someone chats back to you who is on your friends list... didnt help things when it was late for me and I got hit with it.
Then they block people on your friends list too. They put in the web api key, which you can revoke. Steam really needs to look into stuff like this.

[Supafly]

Originally posted by Mysticales:

I was hit with this last night and since someone chats back to you who is on your friends list... didnt help things when it was late for me and I got hit with it.
Then they block people on your friends list too. They put in the web api key, which you can revoke. Steam really needs to look into stuff like this.

It has. You have steam guard and the authenticator to help protect your account. If you fail to use them safely and give the code along with your username and password to random people there is nothing more Valve or anyone else can do.

I do not want another 1000000000000000 levels of security and hoops to jump through in the scope of protecting those that need it most. Even if valve implemented that many layers it'd man nothing. User that already give phishing sites there username, password and guard could will provide the phishing sites with every other security code require just as they do now.

User would also gain even more 'false' sense of security and not worry because they'd have all these extra security measures to protect their accounts.

The weakest link in any security is and will always be the human. So instead of blaming the business how about READING all the WARNINGS and Check everything before you confirm stuff.

[Mysticales]

Monkey I am frustrated enough by this ok? Late at night doesnt help when someone seems to be chatting to you from your friends list and you arent even aware this is even a possible issue that can come up in steam. Never even heard about this trick till today.
Tho it appears this web bot only could send messages and block people? Didnt see anything else happen on the account.