STEAM TRADING SCAM (PLEASE READ)

[Pheosis]

PLEASE READ THIS IF YOU ARE A TRADER!!!

I added someone who wanted to trade 2 keys for my egg. He replied 1 hour later, with a steam message (I have photo proof of everything). In which he told me his other steam account had all the keys. He sent me a link for his account which looked exactly like the original (With the new update I can't see the difference). What I didn't see was that that the link itself said 'steom' and not 'steam'. I clicked and saw a recreated profile. When I clicked on add as friend, it sent me to a login by browser page. (recreated too, also have proof). I tried to login and entered my password it said enter steam authenticator code. Which I did, it was wierd because when I entered my logins it first asked for the code and then said incorrect. I started doubting it. I looked at the link bar and saw steom. Exactly then 2 never seen before friends started playing rocket league. Then I realised what was happening. They stole my login name and password and the code. Then logged in with it (probably automated). Added their friends on my account and opened rocket league to trade it to them. First I panicked, because I and the scammer where on the same time on my account. I opened rocket league after 10 seconds of thinking and started deleting those 2 friends and blocking communication. Then i quickly changed my password. I did all this in 2 minutes. Sadly that wasn't fast enough. They stole half my items. Luckily I never spent money in game. They mostly stole my cars and wheels. Then I blocked them.

Never got scammed before, I always watch the sites I click on. But this seriously is steam's fault. They sent the fake identical steam like on steam chat (probably took advantage of the new layout). Steam should be auto blocking these recreated steam sites. When I received the changed password e-mail it was in Russian, their profiles are Russian too (I have the friends profile). The fake profile that was recreated too.

Is there a way I can contact steam for this, because this can seriously hurt people who have a lot of items on their profiles. PLEASE READ THIS IF YOU ARE A TRADER!!!

[Pheosis]

Messaggio originale di J4MESOX4D:

Messaggio originale di Pheosis:

If it is well known, why hasn't steam done anything about it.

Valve have done plenty over the years to combat phishing but the end-user still has to show some degree of common sense and awareness.

Messaggio originale di Pheosis:

I can't send pictures on here, but it looked legit. This new layout update made it 10 times harder to see fake scam links.

Who cares what it looked like? The URL is the key here. The whole point of fake sites is to recreate and duplicate them and if users aren't going to follow the basic security principles of the internet; they don't need to go to much effort. We've seen people even click on fake links like schteemcornimmunity.lol thinking it was a real site.

No, but look how much you get distracted by the logo and everything, I didn't even doubt the link for a second, the fact that they made this new link update is abnormal, when people are getting scammed every minute.

[J4MESOX4D]

Messaggio originale di Pheosis:

Messaggio originale di ~Ren~:

You can blame Valve all you want, it's your mistake, the wording was clear to see yet you missed it as you didn't check it properly, there are plenty of warnings from Valve about these type of scams, other users and moderators even put together guides to help people avoid them but as long as people continue to believe whatever they're told and freely give away their account details without checking properly then these scams will continue.

wtf, come on, look at the screenshot, if it was the first you saw that, wouldn't you think it was 100% legit

LOL no. How did you fall for that?

[Pheosis]

Messaggio originale di ~Ren~:

Messaggio originale di Pheosis:

Yes ofcourse always check the linkbar, the problem is they made it so that scammers could decorate their linkbar. See the printscreen it has a logo, blue text and everything, because i tought they changed something in the new layout update I didn't even bother checking the linkbar, turns out they made it easier for scammers.

You can blame Valve all you want, it's your mistake, the wording was clear to see yet you missed it as you didn't check it properly, there are plenty of warnings from Valve about these type of scams, other users and moderators even put together guides to help people avoid them but as long as people continue to believe whatever they're told and freely give away their account details without checking properly then these scams will continue.

Yes ofcourse I gave it away freely. Come on, they could atleast warn me that im leaving the offical steam website, they could make the linkbar more standout, BY REMOVING ALL THE OTHER THINGS AROUND IT. At this moment a scam link looks like something made by steam. Ofcourse now I know that scammers can change logos and everything too, but its too late now.

[J4MESOX4D]

Messaggio originale di Pheosis:

Messaggio originale di ~Ren~:

You can blame Valve all you want, it's your mistake, the wording was clear to see yet you missed it as you didn't check it properly, there are plenty of warnings from Valve about these type of scams, other users and moderators even put together guides to help people avoid them but as long as people continue to believe whatever they're told and freely give away their account details without checking properly then these scams will continue.

Yes ofcourse I gave it away freely. Come on, they could atleast warn me that im leaving the offical steam website, they could make the linkbar more standout, BY REMOVING ALL THE OTHER THINGS AROUND IT. At this moment a scam link looks like something made by steam. Ofcourse now I know that scammers can change logos and everything too, but its too late now.

Take some responsibility. There are far worse scams out there - ones that mimic your bank for instance. If you judge sites on just their logo and not utilise any device protection or vet the URL address bar with your eyes; you are going to get creamed on far worse than losing some ♥♥♥♥♥♥ virtual items on a gaming platform.

From the evidence you provided; the site didn't look like Steam, the address bar was completely wrong and the site was called Steom. If you couldn't gauge the sites autheticity from those alone then you are destined to be burned even more badly here or elsewhere.

Think before you click.

[Pheosis]

Messaggio originale di ~Ren~:

Messaggio originale di Pheosis:

I didn't even doubt the link for a second.

That's why you were scammed.

You added someone that wanted to trade, you didn't question anything, even when he said his other account has the keys, alarm bells should have been ringing already but they were not, you clicked a link and were redirected and asked to provide details, again, no alarm bells ringing so you gave your details away.

Valve can have 20,000 extra security measures in place to protect against that but it doesn't matter if the user doesn't use basic common sense.

http://prntscr.com/kcwht8
This is the fake login website, why should any bells ring?

[Muppet among Puppets]

Messaggio originale di Pheosis:

turns out they made it easier for scammers.

Each new thing will be used by scammers.
Even if its the name of a security feature. Or reasons based on its functions.

You need to be MORE careful now. Not less.

In the past, scammers had to ask for your password. And your email password.
Easy to see that it was wrong.

Today they just ask for a code, ("bro, just a code for X reason"). And with this code they can do "everything".

[ReBoot]

Messaggio originale di Pheosis:

Messaggio originale di ~Ren~:

You can blame Valve all you want, it's your mistake, the wording was clear to see yet you missed it as you didn't check it properly, there are plenty of warnings from Valve about these type of scams, other users and moderators even put together guides to help people avoid them but as long as people continue to believe whatever they're told and freely give away their account details without checking properly then these scams will continue.

Yes ofcourse I gave it away freely. Come on, they could atleast warn me that im leaving the offical steam website, they could make the linkbar more standout, BY REMOVING ALL THE OTHER THINGS AROUND IT. At this moment a scam link looks like something made by steam. Ofcourse now I know that scammers can change logos and everything too, but its too late now.

As I said, phishing has been around since the 70s. You have to remain vigilant, that the only way.

[Pheosis]

Messaggio originale di J4MESOX4D:

Messaggio originale di Pheosis:

Yes ofcourse I gave it away freely. Come on, they could atleast warn me that im leaving the offical steam website, they could make the linkbar more standout, BY REMOVING ALL THE OTHER THINGS AROUND IT. At this moment a scam link looks like something made by steam. Ofcourse now I know that scammers can change logos and everything too, but its too late now.

Take some responsibility. There are far worse scams out there - ones that mimic your bank for instance. If you judge sites on just their logo and not utilise any device protection or vet the URL address bar with your eyes; you are going to get creamed on far worse than losing some ♥♥♥♥♥♥ virtual items on a gaming platform.

From the evidence you provided; the site didn't look like Steam, the address bar was completely wrong and the site was called Steom. If you couldn't gauge the sites autheticity from those alone then you are destined to be burned even more badly here or elsewhere.

Think before you click.

It was my first time seeing the new linkbar update, I didn't even know that links displayed logos, this is why I thought it was just a redirect to someones profile. The fake site was identical to the real site: http://prntscr.com/kcwht8

[J4MESOX4D]

Messaggio originale di Pheosis:

Messaggio originale di ~Ren~:

That's why you were scammed.

You added someone that wanted to trade, you didn't question anything, even when he said his other account has the keys, alarm bells should have been ringing already but they were not, you clicked a link and were redirected and asked to provide details, again, no alarm bells ringing so you gave your details away.

Valve can have 20,000 extra security measures in place to protect against that but it doesn't matter if the user doesn't use basic common sense.

http://prntscr.com/kcwht8
This is the fake login website, why should any bells ring?

Because you should know the source of the URL before entering in any credentials especially as by your own admission; you received the fake 'Steom' link yourself. As soon as you accepted that was real; you were ♥♥♥♥♥♥.

[Muppet among Puppets]

Messaggio originale di Pheosis:

http://prntscr.com/kcwht8
This is the fake login website, why should any bells ring?

The url is the key.
Everything else in the browser could be a game.

Note: Even the url can be tricky. So safety belt: Dont ever log into links given

[J4MESOX4D]

Messaggio originale di Pheosis:

Messaggio originale di J4MESOX4D:

Take some responsibility. There are far worse scams out there - ones that mimic your bank for instance. If you judge sites on just their logo and not utilise any device protection or vet the URL address bar with your eyes; you are going to get creamed on far worse than losing some ♥♥♥♥♥♥ virtual items on a gaming platform.

From the evidence you provided; the site didn't look like Steam, the address bar was completely wrong and the site was called Steom. If you couldn't gauge the sites autheticity from those alone then you are destined to be burned even more badly here or elsewhere.

Think before you click.

It was my first time seeing the new linkbar update, I didn't even know that links displayed logos, this is why I thought it was just a redirect to someones profile. The fake site was identical to the real site: http://prntscr.com/kcwht8

Messaggio originale di Pheosis:

What I didn't see was that that the link itself said 'steom' and not 'steam!

[Pheosis]

Messaggio originale di ~Ren~:

Messaggio originale di Pheosis:

This is the fake login website, why should any bells ring?

Don't post that here, common sense again, other people will click it, I won't.

That is the problem, why cant steam make sites verified as legit. For example I use printscreen to upload pictures on steam discussions as many others do too. Why cant you make a simple verified logo next to the link.

[J4MESOX4D]

Messaggio originale di Pheosis:

Messaggio originale di ~Ren~:

Don't post that here, common sense again, other people will click it, I won't.

That is the problem, why cant steam make sites verified as legit. For example I use printscreen to upload pictures on steam discussions as many others do too. Why cant you make a simple verified logo next to the link.

Because the 'verified' logo or whatever can be mimicked. The URL bar is 100% correct and cannot be tampered or masked if it's real. Users follow that and not logos. No social media elements are needed to prove legitimacy when the address bar is flawless.

[Muppet among Puppets]

Messaggio originale di Pheosis:

Messaggio originale di ~Ren~:

Don't post that here, common sense again, other people will click it, I won't.

That is the problem, why cant steam make sites verified as legit. For example I use printscreen to upload pictures on steam discussions as many others do too. Why cant you make a simple verified logo next to the link.

You just said this was the scam site. Thats why he thought it was the scam site

[Pheosis]

Messaggio originale di J4MESOX4D:

Messaggio originale di Pheosis:

That is the problem, why cant steam make sites verified as legit. For example I use printscreen to upload pictures on steam discussions as many others do too. Why cant you make a simple verified logo next to the link.

Because the 'verified' logo or whatever can be mimicked. The URL bar is 100% correct and cannot be tampered or masked if it's real. Users follow that and not logos. No social media elements are needed to prove legitimacy when the address bar is flawless.

What? Im talking about inside the official discussion page, next to the link itself.