❗️❗️❗️SCAM ALERT❗️❗️❗️

Dear users,

Recently scam attempts happen more frequently and we want to warn you about them.

IN SHORT: a scammer impersonating a well-known youtuber under various pretexts makes a user to enter a fraudulent site and enter his login and password.

DETAILED: a scammer has steam accounts which look exactly like steam accounts of well-known youtubers. Such accounts have high level score, a lot of the comments, links to the real youtube / twitter / fb accounts and even scam warning in the description. Here you can see examples of such accounts:

REAL => https://steamcommunity.com/id/JuicyFruityyy/
FAKE => https://steamcommunity.com/id/JuicyFruityYT

REAL => https://steamcommunity.com/id/ProdigyDDK/
FAKE => https://steamcommunity.com/profiles/76561197964289708

SO WHAT DOES THE SCAMMER DO? He contacts the user who won an expensive skin (he can see it on the site in top wins or live drop) in Steam and he offers to join his new video. A scammer under various pretexts lures users to the fake site that looks exactly like a real CSGO gambling site he plays on.

You can find fake copies of any gambling site and scammers constantly create new ones. You can also note that the domain names of the fake sites are very similar to the names of the real sites, although fraudsters also constantly change these domains.
Fake sites usually fully imitate the original UI, home and landing pages, asking the deceived users to authenticate and leave their personal data like a login and a password.
In Juicy’s video you can see how it works:
https://www.youtube.com/watch?v=-XhzjdQx5F8

So for example, the scammer writes you that he is recording a sponsor video for the gambling site and he is ready to share the balance with you. For this he asks you just to go to the site (he adds the link of the fake one) and do something on the site, for example to write a passphrase in the chat. Thus, he distracts your attention, as in order to write in the chat, you need to log in to the site. So this way being in a hurry to get free money, you enter your login and password on the fake site actually passing this info to scammer.

After your attempt to login on a fake web site, the scammer gets active login session on Steam and from this moment he can:
- get your Steam WEB API Key, to manage your trade offers, i.e. substitute trade offers of your skin deposits. Here you can read more about this kind of scam: https://dmarket.com/blog/steam-api-key-scam/
- login on third party websites (like DatDrop or any other site where you login with Steam) to spend your balance and withdraw your winnings.

By the way, after cashing out your money on the gambling site a scammer can even contact you via Steam pretending that he is the site admin to inform you that your balance was locked for some reasons and you have to deposit some amount to unlock it. Of course, If you believe him and deposit, the scammer will just take these money as well.

These are just some of the fraudulent schemes used by hackers. We will do our best to inform you and protect against the new ones. But we also want to remind that it’s only your responsibility to keep your steam data safe and we can’t help you if you have been scammed.

REMEMBER THAT YOU CAN AVOID SCAMMING BY ENABLING 2FA ON DATDROP!

Here are some tips that can save you from a lot of scams:

1. Always log in on the Steam main page first and only then go to the site you want to play on. Never enter your steam login and password on other sites.
2. If the site is real, it will not request your login & password, but will prompt you to log in through Steam immediately.
3. On the fake website, the form of a Steam login is fake, although it looks like the real one. The most suspicious sign of a fake site you should pay attention to is that you will not be authorized (even if you are already authorized on Steam), and there will be no auto-completion of login and password fields in the authorization form.
4. Always double-check the authenticity of the Steam accounts that contact you with any offers.
5. Remember that there are no DatDrop admins who can contact you via Steam. If you face such one, you can be sure that it is a scammer.

HOW CAN YOU KNOW WHETHER YOUR ACCOUNT WAS HACKED?

Here you can check the list of all your Steam API Keys https://steamcommunity.com/dev/apikey
If there are the API keys you haven’t created, most likely that your account was compromised.
In this case you need to:
1. Change your Steam password.
2. Follow https://store.steampowered.com/twofactor/manage and click “Deauthorize all other computers now”.
3. Follow https://steamcommunity.com/dev/apikey and click “Revoke Steam API Key”.