Back to: Trade Errors


Your Steam account may be compromised

If you recieve a random trade offer from a fake Scrap.TF bot, your account may be compromised.

Follow these steps to regain control of your account:

  1. Change your Steam password: This will remove any unauthorized access from your account. You will not get a trade ban or trade hold if you change your password while already logged into your account.
  2. Revoke any API keys: Visit https://steamcommunity.com/dev/apikey and click "Revoke My Steam Web API Key" if that button appears.

Tips to avoid getting your account compromised/hijacked:

  1. When signing into steam on another site such as Scrap.TF, open Steam in a new tab and sign in there first. If the "sign in through steam" webpage still asks for your login, do not fill it in.
  2. Never click on links or download anything from random people on steam or discord or anywhere. Random people will add you and attempt to scam you all the time.
  3. If you use Steam Desktop Authenticator, always download it from GitHub at https://github.com/Jessecar96/SteamDesktopAuthenticator/releases! Never from any other website. There are multiple websites still live with hacked versions of SDA that will steal your account.