I have recently got a friend request from a random person I don't know. I accepted the request though wondering who this is. A few hours later he sent me a message saying "sup my bro wanna trade with you but he can't add you idt why @_@ try you please to add him (LINK HIDDEN FOR SAFETY PURPOSES)" as you can see the link is a scam as it is spelt wrong. It sends you to a website that looks exactly like steam BUT WHATEVER YOU DO DON'T SIGN IN! The person behind this is obviously trying to scam people handing over their steam account, looking for someone who has saved their credit card on their profile.

I have been getting a lot of links like this lately. Just warning people again not to click any suspicious links and watch out for scammers.

9 years ago*

Comment has been collapsed.

These are people who have had their accounts hijacked, and are then basically used to trick others into falling for the same shit.

9 years ago
Permalink

Comment has been collapsed.

Not true. Yes, they have been hijacked. But it is the bot that hijacked those Steam accounts; it automatically sends the same phishing message to all people on their friends list.

9 years ago
Permalink

Comment has been collapsed.

You basically said what he said......

9 years ago
Permalink

Comment has been collapsed.

No, he didn't. There is a distinction between doing it on purpose and an automation.

9 years ago
Permalink

Comment has been collapsed.

sigh....

9 years ago
Permalink

Comment has been collapsed.

Well, looking at his sentence again ("are ... used to trick"), we probably mean the same thing.

But the way he phrases it makes it sound like these people are doing it on purpose.

9 years ago
Permalink

Comment has been collapsed.

Don't include the hijack links.
Don't include profile links.

9 years ago
Permalink

Comment has been collapsed.

+1

9 years ago
Permalink

Comment has been collapsed.

Thats just an excuse to hide behind made up rules since the profile links are sometimes linked to Known websites :P

9 years ago
Permalink

Comment has been collapsed.

Correctly ;)

9 years ago
Permalink

Comment has been collapsed.

Old news, very old news. There is a new topic made for this at least once a week, if not more.

Also, this form of phishing and scamming has been around for ages.

9 years ago
Permalink

Comment has been collapsed.

and still ppl are to dumb to keep their credit-card infos safe (not saved on steam) since one won't lose the account because when one tries to log into your account steam-guard demands a security code sent to your e-mail (same goes for changing the e-mail adress etc)

9 years ago
Permalink

Comment has been collapsed.

Hey, did you know? They are releasing Watch Dogs soon!

9 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 1 year ago.

9 years ago
Permalink

Comment has been collapsed.

Me too, would be pretty cool if it stopped.

9 years ago
Permalink

Comment has been collapsed.

Doesn't Steam Guard protect against this?
Even if they have your Steam password, they still need to have access to your email account in order to get the code needed to log in from a new device. As long as you don't foolishly use the same password for both Steam and your email account you should be protected.

In fact, it is much more dangerous if someone gets your email password, because then they can (as long as they know your Steam login) indicate that they have "forgotten the password" and have the reset link sent to the email account, and then they will have full access to both your Steam account as well as your email account.

9 years ago
Permalink

Comment has been collapsed.

This is not completely true. If you click the link, you get a virus. This virus changes your password from your own computer, so Steam does not pop up Steam Guard. AFAIK, there are some viruses, that simulate Steam Guard window, in which you enter the code you got when attackers tried to login from their computer. Pretty sophisticated.

9 years ago
Permalink

Comment has been collapsed.

lol, proper antivirus software and browser-settings and steam-guard does the rest, but the idiotic casual gamer nowadays doesn't even know how to setup his own machine, so i don't bother anyone that gets his account hijacked that way, because it's the fault of their own stupidity

9 years ago
Permalink

Comment has been collapsed.

Clicking on a link does not get you a virus (unless there are very serious bugs in your browser). Not having up to date virus/maleware software and clicking on a link and then telling the browser to execute the program that was downloaded could get you a virus, but then you should not be running programs downloaded from websites like that.

9 years ago
Permalink

Comment has been collapsed.

"I have recently got a friend request from a random person I don't know. I accepted the request though wondering who this is."

Why? This is obviously not something you want to do, heck, I'm surprised you event clicked the link.

9 years ago
Permalink

Comment has been collapsed.

Why not? What harm could come of it? At most you'd get a good laugh out of a pathetic scam attempt. So long as you don't click on any suspicious links.

9 years ago
Permalink

Comment has been collapsed.

well i got it many times..mostly from girls..they send me link.. but i never open any link on steam a/c..and hardly recive friend req..only geniune req i will accept who not hide their profile and other stuff...so be carefull with scammer..they moslty attack more then 10lvl

9 years ago
Permalink

Comment has been collapsed.

Do not accept random invites. Do not accept invites from profiles with level 0-10. Do not click random links without looking at the url first.

Don't. Don't. Don't.

9 years ago
Permalink

Comment has been collapsed.

Unfortunately they never learn. :(

9 years ago
Permalink

Comment has been collapsed.

Only the last part is really necessary. The others are just mostly a waste of time, but you never know, so if you have the time, there's no harm in seeing what they have to say.

9 years ago
Permalink

Comment has been collapsed.

HJ um cara que nem conheço me mandou um link com IMG pedindo uma dica sobre tf3 que era para seguir o link como nem conhecia o caboclo nem entrei no link

9 years ago
Permalink

Comment has been collapsed.

experto cara, o melhor é o cara se afastar de sites como esse aqui, que divulgam seu perfil da steam, e não colocar o link do seu perfil em qualquer site.

9 years ago
Permalink

Comment has been collapsed.

People! You are guilty, you voluntary send to others site the "Steam" identifier, you enter groups. After these actions you also receive deplorable result.

9 years ago
Permalink

Comment has been collapsed.

You must be new at Steam

9 years ago
Permalink

Comment has been collapsed.

I new, but only once had communication with a boat.

9 years ago
Permalink

Comment has been collapsed.

boats are fun

9 years ago
Permalink

Comment has been collapsed.

I hate it when im too high and start communicating with boats

9 years ago
Permalink

Comment has been collapsed.

are you a boat?

9 years ago
Permalink

Comment has been collapsed.

Oh ))) Thanks for remind anyway. 1 day at Steam? )

9 years ago
Permalink

Comment has been collapsed.

one month :)

9 years ago
Permalink

Comment has been collapsed.

lol, i'm at steam for around 8 years by now and never got any dubious friend requests nor any scum-links send, so IMO it doesn't really matters how long someone is registered at steam^^

9 years ago
Permalink

Comment has been collapsed.

"Joined Steam: 2014-05-30"

9 years ago
Permalink

Comment has been collapsed.

lol, i have 2 accounts both named the same
(because one got banned for a while because of some trouble with skrill, and is now availible again...)
and before you come with horter-acc, i only enter giveaways that i don't own on one of the two accs...
(main acc registered 4. feb. '06)

9 years ago
Permalink

Comment has been collapsed.

The fan of free games it is obligatory to get acquainted with a boat :))

9 years ago
Permalink

Comment has been collapsed.

The woman I love, she have do something terrible on a boat.

9 years ago
Permalink

Comment has been collapsed.

Did this involve a dirty oar?

9 years ago
Permalink

Comment has been collapsed.

my question is how they can steal your steam account if you have doube authentication facton activated on steam and email too :o ?

9 years ago
Permalink

Comment has been collapsed.

The user didn't include protection

9 years ago
Permalink

Comment has been collapsed.

They trick users to run special exe-file that steals the SSFN file used for authentication by steamguard. Or ask them to send SSFN file directly. When they have login+pass+SSFN file, the have full access to the account, without even the need to have mailbox stolen.

9 years ago
Permalink

Comment has been collapsed.

Wow. You dangerous person.

9 years ago
Permalink

Comment has been collapsed.

BTW when you click that link on the chat it doesn't appear the steam warnig that the site may be malicious?? Which wouldn't appear if pointing to any part of their site.

9 years ago
Permalink

Comment has been collapsed.

182 scammers blocked so far, I get 1-5 each day. Sometimes they seem like the same accounts, same name and profile pic. That's lazy.

9 years ago
Permalink

Comment has been collapsed.

not a single scammer in 10 years, private profile rocks ;)

9 years ago
Permalink

Comment has been collapsed.

Wow... Jst a general question... Hv been here only for the past 1 yr nw... Bt I thought private profiles r not allowed to use steamgifts.com..??

9 years ago
Permalink

Comment has been collapsed.

it is allowed, you just have to switch to public once a week for a minute to perform a sync. This allows steamgifts to get your game library to make sure you activate the games you win and filters out giveaways of games you have.

9 years ago
Permalink

Comment has been collapsed.

Getting about 2 bots per day, usual thing by now.

9 years ago
Permalink

Comment has been collapsed.

The noobs hacjers cant enter in your account steam.

They need your email to obtain a key 5 digits verifcation.

The only metod to steal your account is steal your email.

9 years ago
Permalink

Comment has been collapsed.

some of the keys on your keyboard must have been stolen or reordered

9 years ago
Permalink

Comment has been collapsed.

I'm pretty sure that you'd have to install a keylogger in order for that to happen... o_O

Easiest way to not lose your account in this type of scam is to never click links people send you.

I had it happen earlier today from someone that I've had on my friends list for a few years, his account got compromised and the guy who got his account sent a pic link of the knife along with a message saying that he's selling a knife, that he didn't even have in his inventory, to everyone on his friends list.

I NEVER click links that people send me in Steam chat, especially if they're claiming that it's a pic of something they're trading/selling or a link to a site that they want me to go to to trade things.

I rarely ever trade as it is because of all of the scammers and my lack of expendable income due to being disabled, so I don't get a lot of scam attempts, but the ones that I have gotten were pathetically lazy and very easy to spot. lol

9 years ago
Permalink

Comment has been collapsed.

Does this site expect you to log in or does it just download malware?

9 years ago
Permalink

Comment has been collapsed.

I think both

9 years ago
Permalink

Comment has been collapsed.

This isn't a new scam, scammers have been using this basic scam for years now, the only thing that changes is the site they try to send you to. They're running out of names that look like steamcommunity. lol

Easiest way to not get scammed is to NOT click any links that people send you.

9 years ago
Permalink

Comment has been collapsed.

You know... You could always just not accept requests from strangers. Hell, I have it flatly stated in my steam profile that I do not accept random friend requests.

"Chances are that I will not accept a random add unless I either recognize the name, or if you are related to dealings on SteamGifts.com. "

I go on to mention that unless someone attempting to add me is from a writing community I frequent, that someone probably does not need to get into contact with me, citing that whether someone needs to contact me from SteamGifts is pretty straightforward.

That is why when, just earlier this week, I was contacted by an [unassigned] bot account, I did not accept. Even without the research I wasn't going to accept their request. In the end, my research only served to have me report them.

9 years ago
Permalink

Comment has been collapsed.

+1

Good advice!

Never accept random friend requests.

9 years ago
Permalink

Comment has been collapsed.

Got a random add from a stranger today, private profile and level 0, so the request was rejected.

Lesson of the day: Dont' accept suspicious/random adds, avoids all possible consequences.

9 years ago
Permalink

Comment has been collapsed.

Meh, I get an occasional one, I'll accept for lulz, they send their crap, I don't even respond, copypasta into a Steam Report window and block all further communications. Probably does jack-all but it gives me a "Boy Scout deed of the day" feeling.

9 years ago
Permalink

Comment has been collapsed.

For My Profile, I say COMMENT on my profile why you want to add me before I accept request from random people.
90% of the people ignore this. This also help me filter out scammers, spammers, beggers, etc.

I also post this in my profile for people wanting to add me:


Time limit to Comment after Friending before Ignoring

  • People who haven't even set up community profile: Really? Instant Ignore, possible block.
  • Private Profiles: You have 5 minutes to comment before being ignored.
  • For Profiles Under Level 10: You have 30 minutes to comment before being ignored.
  • Profiles Level 11 and up: You have 60 minutes to comment before being ignored.

If you resend request and again ignore commenting to my profile why you want to friend, i will most likely ignore and block.


And even that much time is probably too much, I might lower it. If people can't follow a simple rule to comment, then i guess it isn't important.
I've also started writing down names / profiles in a .txt file of all the people I ignore and can keep track of them.

9 years ago
Permalink

Comment has been collapsed.

I don't even do that.. I just ignore everyone I don't know :) Proud to say I have never been hacked or scammed in any game or account or what ever.

9 years ago
Permalink

Comment has been collapsed.

Kind of you being too sweet. I recommend instant block without a chance to respond back no matter what :D

9 years ago
Permalink

Comment has been collapsed.

Closed 5 years ago by MSKOTOR.