TL;DR DO NOT ENTER YOUR STEAM LOGIN DETAILS ON ANY WEBSITE OTHER THAN <a class="postlink" href="http://steamcommunity.com/" onclick="window.open(this.href);return false;">http://steamcommunity.com/</a> There seems to be a new trend going around recently of getting random adds from people saying something like "Add my friend he has a really good offer". They will then supply what looks like a steam profile link but is in fact a link to a fake steam community site. This then requests your steam login details to allow you to add them, but is of course just designed to steal them so they can take over your steam account and steal your inventory etc. I've been getting at least 2 a day for the past few weeks, but I would consider myself a high profile trader, especially with my profile available to anyone who buys something on TF2shop, where I get high exposure to the trading community. A good rule of thumb would be to bookmark the official steam community page and login into it when you are going to authorising access to a website such as TF2 outpost, or following a steam community link someone gave you. If after logging in you follow the link and the page asks for your login details again then you know it is fake, as the real steam community remembers logins across browsing sessions. If you do receive a phishing link like this then please report the offenders Steam profile for phishing. It will normally be a very slight difference to the normal steam community page, for example: This is my original: <a class="postlink" href="http://steamcommunity.com/id/300_Angry_Kittens" onclick="window.open(this.href);return false;">http://steamcommunity.com/id/300_Angry_Kittens</a> A phishing one may look like this, where one "m" has been replace with an "n": Code: http://steamcomnunity.com/id/300_Angry_Kittens Or the "i" has been replaced with an "l": Code: http://steamcommunlty.com/id/300_Angry_Kittens If you note the first example is actually a webspace that exists.