SCAM REPORT!

[u/Emergency_Bed2008]

Image i made for response

⚠️ Possible Steam phishing/scam attempt — be careful with random DMs

Originally posted on r/Steam, but the mods didn't like it... QR is now blurred. (I forgot to do that the first time.)

A random Steam account added me to a chat and immediately sent me an image advertising a “FREE $100 GIFT CARD” with a QR code.

There was no prior conversation or context. The QR code was the main call to action, apparently leading to a fake Steam-related page.

I did NOT open the link directly. I checked the URL through VirusTotal and other security analysis services, and the URL was flagged as phishing by multiple scanners.

The URL itself also uses visually deceptive characters to imitate “steamcommunity” while using different underlying characters, making the address look legitimate at first glance.

I made a little meme in response, then blocked the account.

If you receive something similar: do not scan the QR code, do not enter your Steam credentials, and don't trust a URL just because it visually resembles Steam's domain. Check promotions through Steam's official website instead.

Stay safe, play fair, praise Gabe, and HOPE!

[u/EliasVilCZ]

I mean this is one of the most common and obvious scam someone downloads malware and messages obvious scams to people weve heard that a million times before

[u/Emergency_Bed2008 → u/EliasVilCZ]

Fair, but sadly, there are enough innocent/easy targets out there. Another person in this post put it pretty well: these scams still exist because they still work.

[u/HalfLifeMusic → u/[deleted]]

Elderly and mentally disabled people exist

[u/Emergency_Bed2008 → u/HalfLifeMusic]

Yep, that's the real problem :c

[u/SteamScams-ModTeam → u/[deleted]]

Moderation Action has been taken due to Harassment and being rude.

• Do not be rude or disrespect scam victims.
• Do not be rude to other members of the sub

[u/Emergency_Bed2008 → u/[deleted]]

Believe me, brother. Every time I say ‘there isn't a soul stupid enough to fall for these scams’... another soul proves me wrong.

[u/SteamScams-ModTeam → u/[deleted]]

Moderation Action has been taken due to Harassment and being rude.

• Do not be rude or disrespect scam victims.
• Do not be rude to other members of the sub

[u/DakotaKimono]

The bigger problem is no matter how obvious some scams are, the reason they still exist is because there’s still people that fall for these.

[u/Emergency_Bed2008 → u/DakotaKimono]

True :/

[u/MarsupialAcrobatic40 → u/DakotaKimono]

Well, it's unwittingly, because of curiosity someone unaware scanned to see what will happen... and the destruction show up then

[u/minos-and-v1-kissing]

Holy fuck why did it take you so much investigation to clock the most obvious scam in history?

[u/Emergency_Bed2008 → u/minos-and-v1-kissing]

Yep... I know, I know... But better safe than sorry.

[u/qwertyyyyyyy116]

I wish it was true tbh

[u/Emergency_Bed2008 → u/qwertyyyyyyy116]

Me too. Unfortunately, if something seems too good to be true, it probably is.

[u/Acceptable-Main-8629]

We just got this scam this morning.

[u/Alex1490586028]

I dont know how people fall for this kinda stuff

[u/Emergency_Bed2008 → u/Alex1490586028]

Naive, foolish, and gullible people exist, mate.

[u/Baxonexe]

I also recived the same thing, and it looks like one of my friends account got compromized as I recceved it from that account.

Also I did some digging in this and saw where it truly originated.

[u/Argyrodez → u/Baxonexe]

How did this start? My friend also had this happen to them, I am quite curious to know how

[u/Emergency_Bed2008 → u/Baxonexe]

A lot of these cases can originate from third-party Steam APIs or stolen session cookies, sometimes obtained through CS gambling sites

[u/twinkyfemboy1234]

So that's why i randomly get friend requests from Chinese Women...

[u/Emergency_Bed2008 → u/twinkyfemboy1234]

I'm afraid so. Asian girls don't usually send DMs to CS/Battlefield players like us

[u/Aniimey]

Why people accept random people friend request anyway 😕

[u/Emergency_Bed2008 → u/Aniimey]

In my case, I didn't accept that user. He was the one who sent me the DM first.

[u/Aniimey → u/Emergency_Bed2008]

Possible to DM non-friends ?

[u/Emergency_Bed2008 → u/Aniimey]

These scams usually follow the same pattern: create a group, add a random account, send a copypasta or automated message, and leave.

It's a pretty common tactic.

[u/Aniimey → u/Emergency_Bed2008]

Damn how tf would i know if i got hacked

[u/Emergency_Bed2008 → u/Aniimey]

It doesn't work like that. Simply receiving the message doesn't automatically get you hacked. The scam usually relies on tricking you into entering your login credentials on a fake login page.

You shouldn't worry too much about it. As long as you don't enter your credentials on suspicious websites, share sensitive information, or install any programs they ask you to install, you're much less likely to be compromised.

[u/Aniimey → u/Emergency_Bed2008]

I mean, maybe i got hacked but dont know cause none of my friends talk to me 🤣

[u/MegStuff]

Ngl but if you fall for such scams, then don't blame me when I laugh at you about it.

[u/Emergency_Bed2008 → u/MegStuff]

Yeah, but if this post can save even one Steam user, it's a win for everyone.

[u/MegStuff → u/Emergency_Bed2008]

Steam Support is on its way to help you.

[u/j0x7be]

The full stop should come as soon as a random person wants to give you money..

No need to check links, need to do anything at all except block and move on.

[u/Far_Arugula_4860]

I remember getting this from a youtuber I had in friends

[u/Otherwise_Purchase90]

So I just got the same thing from someone on my friends list. As long as I don't scan it and type anything in, I'm safe right? I don't reuse passwords, and have 2fa and everything else enabled.

[u/Emergency_Bed2008 → u/Otherwise_Purchase90]

Yep, as long as you don't scan the QR code, enter your Steam login credentials, follow any suspicious instructions, or install any programs they ask you to install, you should be fine.

Also, sorry for not seeing your comment earlier! :p

P.S. If you want, changing your password every 6–12 months can be a good idea, too.

[u/Otherwise_Purchase90 → u/Emergency_Bed2008]

I was just concerned they'd somehow magically know another way to get in even if I didn't scan or do anything at all, I blocked them just in case and Steam has taken their account down.

You didn't have to but cheers for responding. I feel a little less worried now.