How to Spot CS2 Scam Sites and Fake Trades
Only sign in through the real steamcommunity.com page, never share your Steam Guard code or API key, and check every trade offer in the Steam app before you confirm it. Most CS2 scams break one of those three rules.
Fake Steam login pages
Scam sites copy the Steam sign-in window. Before you type your password, check the address bar says steamcommunity.com (or store.steampowered.com) with a padlock. If a "Sign in through Steam" popup has no real address bar, close it. Sites that only need your Steam ID never need your password.
API key scams
If a scammer gets your Steam Web API key, they can cancel real trade offers and send fake ones that look identical. Check steamcommunity.com/dev/apikey: if there's a key you didn't create, revoke it, change your password and deauthorise all devices.
Fake bots and impersonators
Scammers copy the name and avatar of a site's trade bot or a friend. Before you accept, open the trade offer in the Steam Mobile app and check the account level, join date and what you're giving. A real marketplace shows the bot's details on its own site.
"Accidental report" and Discord scams
A stranger says they reported you by mistake and sends you to "Steam support" on Discord. Real Steam Support never contacts you on Discord or asks for your password, codes or items.
Before you use a new site
Check the site's page on freeskin.gg first: every site page shows its bonus, deposits, withdrawals and sources. Start with a small amount and make one withdrawal first. Remember that trades are reversible for 7 days under Trade Protection.