Be wary if you won "free" games on websites like steamsafe.fun, gamekeys.gq, galcuon-gift.com and perhaps others. When you try to claim the key, it steals your account instead. Article: https://www.bleepingcomputer.com/news/security/steam-accounts-being-stolen-through-elaborate-free-game-scam/

1 month ago*

Comment has been collapsed.

"Outlined" article for easier reading: https://outline.com/TxVmHZ

1 month ago
Permalink

Comment has been collapsed.

Nice service! ^^

1 month ago
Permalink

Comment has been collapsed.

That's a useful site, thanks for sharing :)

1 month ago
Permalink

Comment has been collapsed.

Thanks for sharing that website!

1 month ago
Permalink

Comment has been collapsed.

steamsafe.fun

Honestly, that url alone looks shady as hell :D
Fortunatelly, these scam attempts are usually super-easy to recognize. Unfrotunatelly, sometimes people see free games and kind of switch their brain off and hope for the best.

1 month ago
Permalink

Comment has been collapsed.

Also if some friend send you the link, you might fall for it and check it out.. For me it would be obvious on some AAA game, but let's say you win Bad Rats or some other cheap indie game, even though it's a shady layout like dlh.net, you might try the next step to see if you can get it..

1 month ago
Permalink

Comment has been collapsed.

shady layout

<3

1 month ago
Permalink

Comment has been collapsed.

let's say you win Bad Rats or some other cheap indie game, even though it's a shady layout like dlh.net, you might try the next step to see if you can get it.

You're probably right. I personally tend to back away as soon as a site asks me for a Steam login (hell, I wasn't even willing to link my Steam acc to SGtools for a long time), but I can see how others may be more trusting (or careless, in some cases).

And yeah, DLH does look kinda shady. If DLH asked me to login with Steam, I'd nope right out of there :D

1 month ago
Permalink

Comment has been collapsed.

It does ask you to log in with Steam lol. But... a vigilant person reads the address bar to make sure that they are actually on steam. With those scam sites, it might look like a Steam login page, but the url gives it away. :)

1 month ago
Permalink

Comment has been collapsed.

It does ask you to log in with Steam lol.

It does? I use a throwaway Facebook account for DLH and as far as I can recall, it never asked me to login with Steam.
And yep, the url is a good indicator in these cases :)

1 month ago
Permalink

Comment has been collapsed.

Haha! Oh yes.

Now there is a "login with Paypal" on DLH. That's not a joke. ROFL!

1 month ago
Permalink

Comment has been collapsed.

Haha, seriously? Login with PayPal lol, I wasn't even aware DLH sells something. I've always been there just for the giveaways :D

1 month ago*
Permalink

Comment has been collapsed.

I think they might have a store. I'm the same. I collect the odd giveaway if I don't already have it, but their site is too much of a mess to trust with anything more.

I've never seen a "login with paypal" before, so I laughed loudly when I saw it on DLH.

1 month ago
Permalink

Comment has been collapsed.

I prefer to log in with my credit card credentials - its easy and safe

3 weeks ago
Permalink

Comment has been collapsed.

Usually asking for a login through Steam is alright. But what sets off my alarm is asking for you to login through Steam just to see what the rest of the Steam key is. And for things mentioned elsewhere too, such as AAA games, big priced games etc.

1 month ago
Permalink

Comment has been collapsed.

I'd be thrilled if I won Bad Rats from a steam giveaway.

1 month ago
Permalink

Comment has been collapsed.

Hahaha :D I was looking to create one for you here, but you own both of them already (of course). :P

1 month ago
Permalink

Comment has been collapsed.

But it has safe in the url so it must be a safe website ;-)

1 month ago
Permalink

Comment has been collapsed.

That's quite a clever scam.

1 month ago
Permalink

Comment has been collapsed.

Still the same method since months/years though.

1 month ago
Permalink

Comment has been collapsed.

+1

1 month ago
Permalink

Comment has been collapsed.

+1

1 month ago
Permalink

Comment has been collapsed.

Exactly, always check if you are already logged in on official Steam site and login there if needed. If the other site is still asking you to actually insert username and password after that just don't do it and walk away.

1 month ago
Permalink

Comment has been collapsed.

Only log in to steam(or any other account wherever) if you typed the url yourself. It's a good habit to have.

1 month ago
Permalink

Comment has been collapsed.

It is just a normal scam site with roulette and if any site asks you to log in steam while you already are loged on Steam it is a scam.

1 month ago
Permalink

Comment has been collapsed.

More scary scams.

1 month ago
Permalink

Comment has been collapsed.

I've never heard of any sites like that. And the URL looks rather... unscrupulous.

1 month ago
Permalink

Comment has been collapsed.

That's scary especially since I probably would have fell for the scam...

1 month ago
Permalink

Comment has been collapsed.

The problem is that website doesn't explain that you can LOCK your account to prevent anything to be stolen.

Following the specific account recovery link at the bottom of the message you receive will lead you to another page than the usual one where you'll be able to test your password, tell that you cannot access to the email, then LOCK YOUR ACCOUNT so people cannot do anything anymore with your account, no trades, no messages, no anything.
I see a lot of messages warning for scams and explaining how to contact the support, but not how to LOCK the account, which, anyway, will leads you to contact the support right after to recover your account.
Remember that if anything of that sort happens to you, you can LOCK your account and prevent any transaction and message to be sent.

View attached image.
1 month ago
Permalink

Comment has been collapsed.

For a second there I thought you meant that the scam site just gives you a key and it somehow steals your account when you try to activate it on Steam. Now THAT would have been an extremely concerning security leak.

1 month ago
Permalink

Comment has been collapsed.

From this article:
https://prntscr.com/oupkkj
Just chek IP 188.119.12.154 - this is not Russia!
Why everyone want to see the "Russian trace"?

1 month ago
Permalink

Comment has been collapsed.

Probably from the auto-email from Steam stating it was in Russia (RU). They used the data provided by Steam rather than trace it themselves.

https://www.bleepstatic.com/images/news/security/attacks/steam/free-game-code-scam/changed-email.jpg

1 month ago
Permalink

Comment has been collapsed.

Agree... but: I believe that author of the article is obliged to verify info under he signs.

1 month ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 1 month ago.

1 month ago
Permalink

Comment has been collapsed.

You probably should have verified that it was a simple typo on the article and the full IP denounced by Steam is indeed from Russia (Saint Petersburg).
As Psygineer (sweet nickname, btw) pointed on the picture: the writer of the article accidentally forgot the "3" after the "12".
Check yourself: 188.119.123.154

1 month ago
Permalink

Comment has been collapsed.

Russian trace :)

1 month ago
Permalink

Comment has been collapsed.

Most of this can be avoided by logging into Steam first on Steam's website and using those credentials to log into other sites.
If a site is asking you for your credentials after you've already logged into Steam (even if their login page looks like a Steam login), stay away.

1 month ago
Permalink

Comment has been collapsed.

sorry but who falls for that? you need to be desperate af to enter such a raffle

1 month ago*
Permalink

Comment has been collapsed.

Thousand of people still fall for the Nigerian prince scam to this day. Even when the phishing letter is literally using the Nigerian bank tale.

1 month ago
Permalink

Comment has been collapsed.

+1, I think it's always important to raise awareness on these scams and frauds.. there are tons of them and many people keep on falling and having issues with their accounts and such..

3 weeks ago
Permalink

Comment has been collapsed.

I'm pretty sure there's a term for this, what was it again?
Hmm... right. Natural selection.

Pardon my bluntness, but these kind of scams wouldn't be so successful if more people used some good old Common Sense™.
Sadly, some either lack it, or turn it off it once they smell profits. Or they just reuse the same password everywhere.

1 month ago
Permalink

Comment has been collapsed.

Why click people on strange links, when it called "free" or any random messages?

1 month ago
Permalink

Comment has been collapsed.

thanks for keeping everyone aware. just yesterday i got an event from one of my steam groups spamming one of these websites. if you didn't look hard enough, it'd be easy to fall for it. gotta stay on your toes.

1 month ago
Permalink

Comment has been collapsed.

It's not about free games/items and not about clicking random links, and saying it only makes it worse (because next time it may be another fake reason, and people will fall for it again, because they are only warned about free games). It's nothing new, it's just a regular phishing, and all you need to remember to be safe - DON'T ENTER CREDENTIALS ON RANDOM SITES. And this was advised here many times, that if site wants you to login with steam - you first open new page, type in steam address yourself and enter credentials there, and if it shows you're logged in - then site is a scam. But no matter how many times we repeat it - people keep falling for this old and stupid scam (((

4 weeks ago*
Permalink

Comment has been collapsed.

⬆ This right here. 👏

4 weeks ago
Permalink

Comment has been collapsed.

Bump for still on-going!

View attached image.
3 weeks ago
Permalink

Comment has been collapsed.

Scum is never old

3 weeks ago
Permalink

Comment has been collapsed.

Thanks for the advice.

3 weeks ago
Permalink

Comment has been collapsed.

Sign in through Steam to add a comment.