Reviewed 22 September 2026
Trade safety: the two mistakes that cost players their inventory
Two traps do most of the damage: a password box that only looks like Steam, and a trade offer that quietly differs from the screenshot you agreed to.
Nearly every costly CS2 trade story starts one of two ways. Someone typed credentials into a fake login, or someone accepted an offer without comparing it to the deal.
Real Steam login never leaves Steam's domain
When a third-party site offers Steam sign-in, the form opens on Steam's own address. A password box sitting on the shop's address is something else entirely. Close it.
No market, case site or 'float checker' has a reason to ask for your password, an email code or your mobile authenticator secret. Three items, and the answer to each is no.
Before you confirm: compare both sides of the offer
Steam Guard on your phone is your final checkpoint, and it only works if you treat it as one. Open the offer, then go through each item you give and each item you get. Float, pattern and StatTrak status should be exactly what was agreed.
Typical swaps are a lookalike name in a worse wear, or a different phase from the one in the thumbnail. Any mismatch means you decline.
An API key you did not create can be used to send offers on your behalf without you starting them. Open the Steam settings and delete any key you do not recognize. This is housekeeping for your own account, not something to use against another person.
Free-case promos come with a withdrawal rule
A site that hands out a free case for signing up is describing its own promotion. Until you have read how withdrawal works, treat the prize as something other than money.
Opening many accounts to farm the bonus breaks the usual site rules, and the inventory can end up frozen. That is abuse, not a market strategy.
Questions
Should a CS2 market ask for your Steam password?
No. Steam sign-in runs on Steam's own domain, so a password field on any other site is not the official login.
