Steam Scams: Trade Scam, Fake Support & Phishing (2026)

Q: What is the "Steam API key scam"?

A fake site secretly gets the victim to generate an API key linked to their account. When they make a legitimate trade, a bot detects it, cancels it, and sends an identical trade to the fraudster's account, who receives the items.

Q: Does Steam refund items stolen through a scam?

Generally no. Steam doesn't guarantee refunds for items lost in a fraudulent trade, except under the trade protection system introduced in 2025 (a 7-day window to cancel a suspicious trade).

Q: Does Egidio read my Steam-related messages?

No. Egidio analyzes notifications directly on your phone to detect scam signals. It doesn't store your conversations and sends nothing to a server See how private-message analysis works.

The most common Steam scams

Each variant activates one or more documented psychological levers — spot them under each card.

Most technical

The "Steam API key scam"

A fake site secretly generates an API key linked to your account. On a legitimate trade, a bot detects it, cancels it, and sends an identical trade to the fraudster's account.

Social engineering

The fake "Steam support"

A contact posing as Steam support asks for a screen share or your credentials "to fix a problem". Steam never operates this way.

Borrowed Authority

Redirection

The redirected trade

A cloned or compromised friend's account offers a trade that actually redirects items to a third party.

The Fabricated Bond

Marketplace

Fake third-party trade sites

Sites promising better trade rates than the official Steam Market disappear with deposited items.

Unexpected Gain

Steam officially confirms it never contacts users by email with links or instructions, and never uses a temporary account to chat with a user — any such request is a scam. To address the scale of trade scams, Valve rolled out a trade protection system in mid-2025: received items are now held for 7 days, with a mechanism to cancel a trade identified as fraudulent within that window. On the regulatory front, in February 2026 the New York Attorney General sued Valve Corporation over gambling-style promotion of tradeable in-game items — a separate matter from trade scams, but it confirms growing regulatory attention on virtual item economies.

How to spot a scam

Any request for a screen share by "support" or a stranger.
Login link that isn't steamcommunity.com or steampowered.com.
Request to generate or share an API key on a third-party site.
Trade offer that seems too generous, especially via an unofficial external site.
A friend's message with an unusual tone: their account may be compromised.

Why vigilance alone isn't enough on Steam specifically. The fake "Steam support" scam doesn't play on greed but on fear: the threat of an imminent account suspension pushes people to act fast without checking. That's a different psychological lever than the classic trade scam, and it works just as well on experienced players as on beginners — panic short-circuits experience.

How to protect your account

Never install a screen share at a stranger's request, whatever the reason given.
Never generate an API key on any site other than Steam itself.
Only use the official Steam Market or third-party sites with a well-established reputation.
Enable Steam Guard (two-factor authentication) on your account.

How Egidio protects you

Egidio detects scam signals across more than 183 apps — including the messaging apps used to propose fake trades or impersonate fake support — on top of calls, and warns you before you click a phishing link or share sensitive information.

A Steam scam often starts with a message on another platform before shifting to the fake support request or fake trade. See why filtering a single app is never enough.

100% on your phone. Egidio analyzes notifications locally: it doesn't store your conversations and sends nothing to a server. No ads, no account.

Download Egidio Call blocking is free · messaging protection is Premium

Frequently asked questions

What is the "Steam API key scam"?

A fake site secretly generates an API key linked to your account. On a legitimate trade, a bot detects it, cancels it, and sends an identical trade to the fraudster's account.

Does Steam contact users by email or in-game "support"?

No. Steam never contacts users by email with links or instructions, and never uses a temporary account to chat with a user.

Does Steam refund items stolen through a scam?

Generally no, except under the trade protection system introduced in 2025 (a 7-day window to cancel a suspicious trade).

Does Egidio read my Steam-related messages?

No. Egidio analyzes notifications on your phone to detect scam signals. It doesn't store your conversations.

Learn more →

Is Egidio free?

Call blocking is free, forever. Messaging protection and Family mode are included in the Premium version.

Full price breakdown →

A successful scam costs an average of $19,300. Egidio Family protects 4 people for $59.99/year. Full breakdown →