Steam Scams: Trade Scam, Fake Support & Phishing (2026)

Q: What is the "Steam API key scam"?

A fake site secretly gets the victim to generate an API key linked to their account. When they make a legitimate trade, a bot detects it, cancels it, and sends an identical trade to the fraudster's account, who receives the items.

Q: Does Steam refund items stolen through a scam?

Generally no. Steam doesn't guarantee refunds for items lost in a fraudulent trade, except under the trade protection system introduced in 2025 (a 7-day window to cancel a suspicious trade).

Q: Does Egidio read my Steam-related messages?

No. Egidio analyzes notifications directly on your phone to detect scam signals. It doesn't store your conversations and sends nothing to a server.

The most common Steam scams

Most technical

The "Steam API key scam"

A fake site secretly generates an API key linked to your account. On a legitimate trade, a bot detects it, cancels it, and sends an identical trade to the fraudster's account.

Social engineering

The fake "Steam support"

A contact posing as Steam support asks for a screen share or your credentials "to fix a problem". Steam never operates this way.

Redirection

The redirected trade

A cloned or compromised friend's account offers a trade that actually redirects items to a third party.

Marketplace

Fake third-party trade sites

Sites promising better trade rates than the official Steam Market disappear with deposited items.

Steam officially confirms it never contacts users by email with links or instructions, and never uses a temporary account to chat with a user — any such request is a scam. To address the scale of trade scams, Valve rolled out a trade protection system in mid-2025: received items are now held for 7 days, with a mechanism to cancel a trade identified as fraudulent within that window. On the regulatory front, in February 2026 the New York Attorney General sued Valve Corporation over gambling-style promotion of tradeable in-game items — a separate matter from trade scams, but it confirms growing regulatory attention on virtual item economies.

How to spot a scam

Any request for a screen share by "support" or a stranger.
Login link that isn't steamcommunity.com or steampowered.com.
Request to generate or share an API key on a third-party site.
Trade offer that seems too generous, especially via an unofficial external site.
A friend's message with an unusual tone: their account may be compromised.

How to protect your account

Never install a screen share at a stranger's request, whatever the reason given.
Never generate an API key on any site other than Steam itself.
Only use the official Steam Market or third-party sites with a well-established reputation.
Enable Steam Guard (two-factor authentication) on your account.

How Egidio protects you

Egidio detects scam signals across more than 180 apps — including the messaging apps used to propose fake trades or impersonate fake support — on top of calls and SMS, and warns you before you click a phishing link or share sensitive information.

100% on your phone. Egidio analyzes notifications locally: it doesn't store your conversations and sends nothing to a server. No ads, no account.

Download Egidio Call and SMS blocking are free · messaging protection is Premium

Frequently asked questions

What is the "Steam API key scam"?

A fake site secretly generates an API key linked to your account. On a legitimate trade, a bot detects it, cancels it, and sends an identical trade to the fraudster's account.

Does Steam contact users by email or in-game "support"?

No. Steam never contacts users by email with links or instructions, and never uses a temporary account to chat with a user.

Does Steam refund items stolen through a scam?

Generally no, except under the trade protection system introduced in 2025 (a 7-day window to cancel a suspicious trade).

Does Egidio read my Steam-related messages?

No. Egidio analyzes notifications on your phone to detect scam signals. It doesn't store your conversations.

Is Egidio free?

Call and SMS blocking are free, forever. Messaging protection and Family mode are included in the Premium version.