How to spot a fake marketplace trading bot
The scheme is simple and therefore working: you are going to sell skin on the site, and you receive an trade offer from the “bot” of this site. The profile looks correct, the nickname is the same, the avatar is the same. Only it's not him.
How trading bots actually work, what to check in an incoming offer and why the account level, registration date and comments do not prove anything.
How a legitimate bot transaction works
A real bot of the site sends an offer only in response to an operation that you started yourself in your personal account of the service. First the action on the site, then the offer in Steam - always in that order.
The main rule follows from this: if the trade offer came first, before you did anything on the site, it is a fake. A real bot doesn't know you were going to sell skin until you click the button.
The second consequence: the bot never writes to the chat. He has nothing to tell you, he works automatically. Any message from a “bot” asking you to do something is not a bot.
What to check in the offer
Permanent SteamID of the sender. A list of their bot IDs has been published on the site’s website - check it. This is the only check that cannot be bypassed.
Composition of the exchange in both directions. What leaves you and what comes. A substitution often differs in one position, which is noticed after confirmation.
Transaction token, if the site uses it. It is tied to a specific operation.
And the context: you yourself started this operation a minute ago or the proposal appeared out of nowhere.
- The nickname and avatar are copied in five seconds - it’s useless to look at them.
- Open the site’s personal account using your bookmark, and not via a link from the chat.
- If there is any discrepancy, cancel the offer and start the operation again from the site.
What does not prove identity
Account level. Bought for money, scammers specifically keep pumped up profiles.
Registration date. Accounts are bought and stolen; the old registration date does not indicate the current owner.
Comments in the profile with advantages and reputation. They are written by the same fake accounts, they are cheated in batches.
Icons, clocks in games, beautiful design. This is all registration, not identification.
Lists of friends and groups. They are also copied and cheated.
If you already sent the items
Immediately check the trade history and record the record: permanent recipient ID, time, composition. Take screenshots of your correspondence and profile.
Next, assume that the account may be compromised: change the email password and Steam from a clean device, end sessions, revoke the API key.
Contact the support of the site on behalf of which the fake acted, and Steam Support. The chances of returning the items are low, but it makes sense to record the incident and, most importantly, stop further losses.
Frequently asked questions
How can I verify a marketplace bot’s identity?
Check the permanent SteamID from the offer you received with the list of bots on the site’s website and make sure that you started the operation yourself in your personal account.
Can a bot contact me first?
No. A real bot sends an offer only in response to your action on the site and never writes to the chat.
Do +rep comments prove someone is trustworthy?
No. They are written by fake accounts and are faked. The same applies to the level and date of registration.
What should I do if I accepted a fake bot’s offer?
Record an entry in the trade history, change passwords from a clean device, end sessions, revoke the API key and contact support.
Are a matching avatar and nickname enough?
No, they are copied instantly. The only reliable verification is a permanent account ID.
How to spot a Steam trade scam before confirming
Check recipients, login pages and mobile confirmations. Recognise fake support, copied bots, misleading trade messages and account-access scams.
Read guide
How to revoke a Steam API key and secure the account
Find the official API-key page, revoke an unfamiliar key and understand why checking devices and securing email are also necessary after a compromise.
Read guide