Back to: Trade Errors


Your Steam account may be compromised

If you receive a random trade offer from a fake Scrap.TF bot or someone asks you do "deposit items" into our site, your account may be compromised. Follow these steps to regain control of your account:
  • Change your Steam password: This will remove any unauthorized access from your account. You will not get a trade ban or trade hold if you change your password while already logged into your account.
  • Revoke any API keys: Visit https://steamcommunity.com/dev/apikey and click "Revoke My Steam Web API Key" if that button appears.
  • Sign out from all devices: Visit https://store.steampowered.com/twofactor/manage and deauthorize all devices except your current one.
Tips to avoid getting your account compromised/hijacked:
  • When signing into steam on another site such as Scrap.TF, open Steam in a new tab and sign in there first. If the "sign in through steam" webpage still asks for your login, do not fill it in.
  • Never click on links or download anything from random people on steam or discord or anywhere. Random people will add you and attempt to scam you all the time.
  • If you use Steam Desktop Authenticator, always download it from GitHub at https://github.com/Jessecar96/SteamDesktopAuthenticator/releases! Never from any other website. There are multiple websites still live with hacked versions of SDA that will steal your account.