API Scam With Skins

[NcBoiDre]

I got api scammed for alot of my rust skins around 100$ and ive cleared my steam api key and everything and everytime i trade i still get scammed someone please help!

[Wizardhermit]

No, this is what you get for using obvious scam websites.

[NcBoiDre]

no bro some guy asked me to check out his rust gambling website and then boom

[Wizardhermit]

And you willingly gave away your account information.

A Trade API scam usually works as follows:

The scammer gets your Steam Web API Key. This is obtained when you log into a scam website.

The next time you make a trade, the scammer (a bot) uses this API key to cancel the trade.
The scammer (a bot) sets up another profile that looks exactly like the account you're trying to trade to. It creates a new trade to this bot account, this all happens very fast.

You hit accept on your Mobile Authenticator, and the scam is done - congratulations! you've just sent your items to an unknown 3rd party!

Morel of the story... Stop using skin trading sites outside of Steam, they are all scams.

[NcBoiDre]

never thought it would be a scam tho dude

[Wizardhermit]

Then learn from this mistake and don't do it again.

[Muppet among Puppets]

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey

Originally posted by NcBoiDre:

never thought it would be a scam tho dude

Each and any situation where you login with a link or button could be a scam.
Thats why you only login to original pages the login belongs to, by using your own path.

[Supafly]

Originally posted by NcBoiDre:

never thought it would be a scam tho dude

Exactly. Most scams involve tricking a person by peddling some story. If it was obvious they'd get no victims. Do what Muppoet said in post #6

If you insist on using third party sites do it the safe way

1. Open Web browser
2. Login on Steams Official page
3. Visit Third party site
4. Look for and use the one click login button
5. If 4 doesn't work and you're asked for you username, password and Guard code your on a phishing site. LEAVE and DO NOT use again

Can also use sites like scamadviser.com to check how trustworthy a site is before using it. Works for any site not just Steam related. Use it whenever entering login credentials or banking data

[J4MESOX4D]

Originally posted by NcBoiDre:

no bro some guy asked me to check out his rust gambling website and then boom

Originally posted by NcBoiDre:

never thought it would be a scam tho dude

Scams like this are years old and common knowledge. That's like some random Nigerian Prince emailing you saying you've won $100,000,000 but you need to pay them $1000 so they can complete the paperwork.

Never enter your credentials into any random 3rd party site especially if someone asks you to.