What's the most common CS2 skin scam?

Fake Steam login pages (phishing). A 'friend' or 'trader' sends you a Steam-looking link, you log in, and your inventory is drained in seconds. Always check the URL bar is exactly steamcommunity.com before logging in.

Are middleman trades safe?

Only if the middleman is a recognised platform with escrow (Skinport, CSFloat, Steam Market itself). Random Discord 'middlemen' are almost always scams — there is no real middleman, just a thief with your skins.

What is API trade hijacking?

An attacker steals your Steam API key and silently cancels trades, replacing them with trades to their own account. The fix is to revoke your API key at steamcommunity.com/dev/apikey if you suspect compromise.

Safety guide

How to avoid CS2 skin scams in 2026

Most scammed accounts aren't hacked — they're tricked. Here are the patterns to watch for and a checklist before every trade.

Anyone claiming to be Steam support in chat or DMs is a scammer. Valve never contacts users this way.

Fake Steam login pages

Phishing sites mimic Steam down to the pixel. Always type steamcommunity.com manually for high-value logins, and enable Steam Guard mobile authenticator.

Fake 'inventory value bot' trades

A bot offer claims the skins are worth more than they really are. Always verify prices on Skinport or CSFloat before accepting any trade.

Discord middleman scams

There is no such thing as a verified Discord middleman. Only trust escrow services that run on a public marketplace with a track record.

API key hijacking

Never paste your Steam API key into a third-party site. If you have, revoke it at steamcommunity.com/dev/apikey and change your password.

Fake CS2 marketplaces

If a site appeared this month and promises 0% fees plus 110% buy prices, it's a scam. Stick to platforms in the SKIN.gg catalog or other well-reviewed names.

6-step safety checklist

Enable Steam Guard mobile authenticator (not email).
Type steamcommunity.com manually — don't click login links.
Use only marketplaces with public reputation and escrow.
Never share your Steam API key, login QR or trade URL with strangers.
Review every trade window's items and recipient before confirming.
For big sales, use SEPA/PayPal-supported marketplaces, not Discord deals.

FAQ

What's the most common CS2 skin scam?: Fake Steam login pages (phishing). A 'friend' or 'trader' sends you a Steam-looking link, you log in, and your inventory is drained in seconds. Always check the URL bar is exactly steamcommunity.com before logging in.
Are middleman trades safe?: Only if the middleman is a recognised platform with escrow (Skinport, CSFloat, Steam Market itself). Random Discord 'middlemen' are almost always scams — there is no real middleman, just a thief with your skins.
What is API trade hijacking?: An attacker steals your Steam API key and silently cancels trades, replacing them with trades to their own account. The fix is to revoke your API key at steamcommunity.com/dev/apikey if you suspect compromise.

SKIN.gg is an independent catalog. We don't sell skins, hold funds, or process trades. We are not affiliated with Valve, Steam, or any marketplace listed.

Ready to sell safely? See our recommended marketplaces →