Phishing Issue

After a suspected attempt

Victim-facing warning signs (fake domains, rushed login, fake support) live in phishing & fake sites. This page assumes the lure already arrived. It does not describe how to build phishing and it does not collect evidence files.

Did you submit anything?

1. 1

   If you only viewed and closed

   Bookmark official hosts. Ignore the message. Optional: Steam and CSGOEmpire password change on official sites if you are unsure whether an old password was reused elsewhere.
2. 2

   If you typed a password or Guard code

   Switch to account compromised immediately. Steam’s phishing and hijacked accounts article is the Steam-side authority.

3. 3

   If you pasted a trade URL only

   Unexpected offers can follow. Generate a new URL in Steam (trade URL FAQ) and do not confirm surprise trades. See trade URL.

4. 4

   If you installed remote-access software

   Uninstall it using your operating system’s normal tools, then treat the machine as untrusted until Steam/email/CSGOEmpire passwords are changed from a different device if possible. We will not walk through malware internals.

Unexpected trades

Real P2P offers come from listings you started on csgoempire.com. An offer that appears after a DM, giveaway, or leaked URL should be declined. Confirming it because someone said “it is your withdrawal” is how inventory leaves. Compare with pending trades on the official site. Operational P2P detail: trading; failures of real listings: trade problem.

Fake support messages

CSGOEmpire support is on-site. Steam Support is on Steam properties. This website does not invent an operator email. A helper who needs you to log in, share a screen with account cookies visible, or send items to a holding account is not support.

After you are done refusing the lure, the preventive article is Steam security. Login loops from the real domain: login problems. Hub: troubleshooting.

Referral signups still belong on https://csgoempire.com/r/MAX50 (MAX50) — check the hostname after any click, including ours.

What to keep for official support (and what not to send)

If you later use Steam Support or CSGOEmpire on-site support, useful notes are ones you can see without exporting secrets: the fake hostname as you remember it, the time, whether you typed a password, whether a Guard prompt appeared, and Steam trade IDs from Steam’s own history. Do not export cookies. Do not photograph backup codes. Do not upload an authenticator QR.

This independent site will not process those notes. We also will not tell you how the lure was built. If a page imitated csgoempire.help itself, still recover on Steam and csgoempire.com — impersonating a help site does not give the impersonator inventory unless you typed something or confirmed a trade.

After the incident, the preventive cluster is Steam hub → security → Guard. Marketplace activity you still intended to complete can wait. A free case or a pending listing is not worth a second login on an untrusted tab.