Back to: Trade Errors

Your Steam account may be compromised

If you receive a random trade offer from a fake Scrap.TF bot or someone asks you do "deposit items" into our site, your account may be compromised. Follow these steps to regain control of your account:
  • Change your Steam password: This will remove any unauthorized access from your account. You will not get a trade ban or trade hold if you change your password while already logged into your account.
  • Revoke any API keys: Visit and click "Revoke My Steam Web API Key" if that button appears.
  • Sign out from all devices: Visit and deauthorize all devices except your current one.
Tips to avoid getting your account compromised/hijacked:
  • When signing into steam on another site such as Scrap.TF, open Steam in a new tab and sign in there first. If the "sign in through steam" webpage still asks for your login, do not fill it in.
  • Never click on links or download anything from random people on steam or discord or anywhere. Random people will add you and attempt to scam you all the time.
  • If you use Steam Desktop Authenticator, always download it from GitHub at! Never from any other website. There are multiple websites still live with hacked versions of SDA that will steal your account.