Common CS2 Skin Scams and How to Spot Them

Skin scams have been running for a decade and the successful ones are not sophisticated. They rely on urgency and on people not checking one specific thing. Here is what to look for.

Fake login pages

The most common and the most damaging. A link leads to a page that looks exactly like the Steam login, sometimes rendered as a fake browser window inside a real page. You enter credentials and the account is gone within minutes.

The check: the address bar. Real Steam login only ever happens on steamcommunity.com or store.steampowered.com. If the “browser window” is inside a page, you cannot check the address — which is the point. Close it.

API key hijacking

After a phishing login, attackers register an API key on your account. It lets them silently cancel your outgoing trades and replace them with their own. You accept what looks like your trade and the items go elsewhere.

The check: visit your Steam API key page occasionally and revoke anything you did not create yourself. Always read the trade confirmation on your phone, not just the offer on screen.

The “verify your account” trade

Someone asks you to send items to prove ownership, or to a “bot” for verification, promising an immediate return. There is no such process. Items sent are gone.

The check: no legitimate process requires you to send items first. Ever.

Impersonation

A profile copies the name and avatar of a trusted trader, a support agent or a store representative and contacts you directly. Often they cite a real order to sound credible.

The check: we never contact customers on Steam. Our only channels are the contact form on this site and email from our own domain. If someone claims to be us on Steam, they are not.

Middleman scams

A third party offers to hold items to make a trade “safe”. They keep them.

The check: there is no legitimate middleman. Buy from a store or trade directly.

Fake screenshots of value

An inflated “market value” screenshot used to justify an unfair trade. Prices are trivially faked in an image.

The check: look prices up yourself, in your own browser, before agreeing to anything.

The three rules that cover everything

1. Only ever type your Steam password on a page whose address bar you can read and verify.
2. Never send items expecting them back.
3. Read the item list in the mobile confirmation, not the offer on your screen.

Applied consistently, those three defeat every scam on this list.