50$ Gift Card Scam

[Beeho]

Hi I recently got a dm from a friend of mine on discord, saying that he has sent me a 50$ Steam gift card. Obviously it is a scam link, but I clicked on it by accident.

Since I already clicked on the link, I went to the scam website and took a look without interacting with it, to see what kind of website it is. Apparently it is a fake steam website with exact same UI as the official steam website(the adress of the fake website was something like "steamcommunjilty"), where it says that I should log in to redeem the 50$ "reward". If I have logged in, it probably would have been able to take my ID and password information.

And my question is, can those links be harmful just by clicking on them? Since the website is a "fake website where it wants you to type login information", I think it shouldn't be harmful just by clicking on it (i hope). But this is first time in my life such thing happening and I'm concerned about them taking my personal information, putting malwares on my pc etc.

ps. I ran a anti-malware software and it says no malwares detected apparently

[Muppet among Puppets]

There COULD be a danger in clicking a link.
But hackers who do that, would not waste it on a phishing page.

No one can tell if something is or is not something. Though it should be not more worrying than browsing the internet in your case.
Avoid links like that.

[eririixxq]

Only clicking on the link, nothing should happen, 99% of these sites are simple phishing to steal only your account information.

[cSg|mc-Hotsauce]

If you have saved your Steam login credentials in the browser it opened, yes.

[PepeChurches]

Same thing happened to me right now. Had my guard down and clicked on it but didn't "log in". I'm really worried just as Beeho. What should I do to check if I'm safe on Disc and Steam?

[Itz_Nowdy]

IF u do that it might can even hack ur discord be aware guys

[Neo]

I'd do a full virus scan and also take steps to secure your account, just in case it did swipe your credentials from your cookies or saved login info on your browser.

It probably didn't, but it only takes a few moments to secure your account, so just be safe.

There are guides on steam in how to secure your steam account.

[Neo]

Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[wernerhoerz]

It happened to me view weeks ago. My email was chained to a unknown email adress.

With this steps it worked to get my account back.

[xSithlordx]

Happened to me this morning, but it was my account that sent the message. I have 2 factor enabled, and the message was sent at a time when my PC was turned off. I sent a ticket to steam support to see if I can get a location of where the message was sent from

[Nanami]

This thread was quite old before the recent post, so we're locking it to prevent confusion.