Account security · A Best CS2 guide

Steam Trade Offer Safety: A Verification Checklist

The final trade confirmation is a decision about a specific recipient and specific items. Use this checklist to spot mismatches, pause suspicious requests and find Steam's official security and recovery routes.

In this guide

The short version

  • Recheck the recipient and every outgoing item at the final confirmation, including replacement offers.
  • Steam trade messages cannot transfer cash or prove an external payment will arrive.
  • Secure compromised accounts through official Steam guidance; reporting and reversal eligibility do not guarantee recovery.

Start from the intended transaction

Before examining an offer, write down what you intended to do: which items leave, which items arrive, and which account should receive them. If an external service is involved, retain its order identifier and the recipient details shown in that order. Treat these as a comparison record, not proof that the service or transaction is safe.

Open Steam through your usual client or a known official address. Steam's account-security guidance warns that friends' accounts can be compromised and directs logins to its official domains. A logo inside a page is not enough to establish where you are signing in. If a message unexpectedly introduces a new login, download or recipient, pause the transaction and establish the source independently before supplying any information.

[1] Steam Support: Account Security Recommendations[2] Steam Support: Recommended Trading Practices

Compare the actual account and every item

Check the trading partner in the offer itself, not just the display name in a chat. Steam warns about impersonated friends and trusted traders. Review the profile and contextual information Steam presents against the intended recipient. A familiar name or avatar is insufficient evidence on its own; a stranger's reputation comments cannot resolve an account mismatch.

Read every outgoing and incoming item, including its displayed properties and quantity. Steam's trading guidance recommends inspecting item details and watching the trade log for additions, removals or changes. In practical terms, compare the final item set against the original agreement, even if the preview image looks familiar. If a detail necessary to identify your item cannot be checked, leave the offer unconfirmed. Do not let a countdown replace that comparison.

[2] Steam Support: Recommended Trading Practices[3] Steam Support: Steam Trading

Separate the item transfer from payment promises

Steam's recommended practices state that its trading interface cannot transfer money, including wallet funds or external payment-wallet balances. A trade message promising cash does not add that cash to the transaction. Steam also warns against sending items now in expectation of another trade later. A confirmation showing nothing coming back means the Steam offer itself supplies no reciprocal item.

For example, imagine an offer takes two skins and says the payment will appear after confirmation. The text establishes only what someone wrote. It does not establish that money is held, that the sender controls a payment account, or that the promised amount will be paid. Even matching an external order does not turn Steam into an escrow service for that payment. Treat the separate payment obligation as an additional unresolved risk.

[2] Steam Support: Recommended Trading Practices[3] Steam Support: Steam Trading

Treat a replacement offer as a fresh decision

Steam's trade-redirection warning describes an attacker canceling an intended trade and substituting an impersonation account after obtaining account access. The final mobile confirmation therefore needs its own recipient and item check. If an offer disappears and another arrives, do not assume the earlier verification carries over; compare the replacement with your original record from the beginning.

Stop when a request suddenly becomes a verification transfer, a rescue transfer or a threat of account punishment. Steam says support representatives do not handle these demands through Discord or Steam Chat. The same article explains that an API key is not necessary for trade redirection, so the absence of a key does not rule out compromise. Pressure to skip the confirmation details is a reason to disengage, not a reason to hurry.

[4] Steam Support: Scam: Trade Redirection

If something looks wrong, secure access and preserve evidence

If you suspect compromise, stop confirming trades and follow Steam's security guidance: review Authorized Devices, use Sign out everywhere when appropriate, change your Steam password, secure associated email accounts and scan for malicious software or extensions. Steam's stolen-account help places computer and email security before password recovery. A password change alone should not be your evidence that the underlying problem has been resolved.

Keep the relevant profile URL, trade record, timestamps and messages. Report the involved Steam account through its profile using the reporting feature. Steam says these reports carry useful interaction information for review; it also says action depends on verifiable conduct. Keep account recovery separate from reporting another user. Use the official help site's recovery route if you cannot sign in, and never give a stranger passwords or private recovery information to prepare a report.

[1] Steam Support: Account Security Recommendations[5] Steam Support: What do I do if my Steam Account is stolen?[6] Steam Support: How to Report a Scammer, Hijacker or Phisher

Check protected-trade eligibility without assuming a refund

Steam's CS2-specific guidance describes a seven-day reversal window for Trade Protected items. First regain control of the account; then inspect eligible trades in Steam trade history. The stated reversal action affects all protected trades from the preceding seven days, not just a personally selected disputed trade. The initiating account receives a thirty-day trade and Community Market cooldown.

That mechanism is distinct from asking support to recreate an item or asking an external service to refund money. Eligibility depends on the trade being protected and still within the window. A report does not promise a reversal, and a reversal does not establish an external payment outcome. Read Steam's current confirmation carefully before deciding: the effect on other eligible trades matters as much as the one that first alerted you.

[7] Steam Support: Trade Protected Items[6] Steam Support: How to Report a Scammer, Hijacker or Phisher

Questions & answers

Is a matching name and avatar enough to confirm a trade?

No. Steam warns about impersonation. Compare the actual recipient information and item contents at final confirmation; recheck any replacement offer.

[2] Steam Support: Recommended Trading Practices[4] Steam Support: Scam: Trade Redirection

Does having no Steam API key rule out trade redirection?

No. Steam explains that attackers with account or computer access can redirect trades without API access. Follow the broader account-security guidance if you suspect compromise.

[4] Steam Support: Scam: Trade Redirection

Will reporting a scam guarantee my skins are returned?

No. Reporting, account recovery and eligible protected-trade reversal are separate processes. Check Steam's current eligibility information; none establishes a guaranteed external payment refund.

[6] Steam Support: How to Report a Scammer, Hijacker or Phisher[7] Steam Support: Trade Protected Items

Sources & limits

Official Steam documentation checked on 2026-09-11, principally through readable indexed article bodies because direct FAQ retrieval produced incomplete shells. The recovery page also displayed an error banner. This is defensive editorial guidance, not hands-on security testing or a promise of safety, item restoration, reversal or cash recovery. No login, trade, security change, report or support request was performed. Related review links indicate topical relevance only.

  1. Steam Support: Account Security RecommendationsOfficial article body read through indexed web retrieval; direct open returned an image-only shell. · 11 Sept 2026 · Supports official login origins, Authorized Devices, password and email security, and malware checks. No account or security setting inspected.
  2. Steam Support: Recommended Trading PracticesOfficial article body read through indexed web retrieval after direct open returned an incomplete shell. · 11 Sept 2026 · Supports recipient verification and unsupported money transfers. The editorial comparison checklist is not a guarantee against scams.
  3. Steam Support: Steam TradingDetailed official article text read in indexed web retrieval on the check date. · 11 Sept 2026 · Used for item inspection, trade-log checks and external-payment limits. General no-restoration wording is not used to override the separate CS2 Trade Protection mechanism.
  4. Steam Support: Scam: Trade RedirectionEnglish article body read from indexed retrieval of this official localized endpoint; both localized and canonical direct opens returned incomplete shells. · 11 Sept 2026 · Supports replacement-offer checks, support impersonation warnings and the fact that API access is not required for redirection. No exploit or account action performed.
  5. Steam Support: What do I do if my Steam Account is stolen?Public official recovery instructions read through indexed retrieval; direct open included article content alongside an error banner. · 11 Sept 2026 · Used for computer and email security before recovery. Recovery flow was not started or tested; this is not evidence that the interactive wizard is working for a particular user.
  6. Steam Support: How to Report a Scammer, Hijacker or PhisherOfficial article text read through indexed retrieval; direct open redirected to the English endpoint and returned an image-only shell. · 11 Sept 2026 · Supports profile reporting and the requirement for verifiable conduct. No report submitted.
  7. Steam Support: Trade Protected ItemsDetailed official article body read through indexed retrieval; direct open returned an image-only shell. · 11 Sept 2026 · Supports the seven-day protected-trade window, reversal of all eligible protected trades in that period and thirty-day initiating-account cooldown. No trade history or reversal tested.

General information, not a promise about an individual account or transaction. How we research · Responsible play and support.