Some Steam scams don't need a fake website. The scammer gets you on a call, asks you to share your screen "to verify" something, or talks you into installing a remote-support tool. From then on they can read every code you open and, with remote control, click for you. Nothing legitimate on Steam needs another person to watch or drive your PC.
Two kinds of access
Screen sharing gives the other person a live view of your screen, through a voice app's share button or a video call. They can't click anything, but they can read whatever you open: emails, codes, settings pages.
Remote-access tools go further. Microsoft's own support page for its Quick Assist tool reminds users that the helper "can see your computer screen or control your PC" if you allow it, and warns that you should only let a helper connect if you started the conversation by contacting Microsoft Support directly. Other remote-desktop programs work the same way. They're legitimate products, which is exactly why scammers like them: nothing about the software itself looks suspicious.
How it shows up around Steam
Fake staff "verification". In the "I accidentally reported you" scam, the fake Steam admin Malwarebytes documented in 2021 told victims to log out so they could "start the scanning of your account status", then asked for the email address on the account, the code Steam emails to it and the Steam Guard code. A shared screen hands over the same things without you typing them into a chat. Our guide to the fake report scam covers that script in full.
Fake restrictions. Valve warns that some malware lays fake restrictions over Steam, blocking your library and telling you to contact an agent through Steam Chat or Discord. Valve says real Steam Support alerts always point to help.steampowered.com, and anything else is fake.
"Install this to play." Valve's scam FAQ describes people who say you need their voice software, anti-cheat or another program to join a tournament, when the download is malware. A friendly team-mate asking you to share your screen while you install it is the same scam with a witness.
Downloads pushed in chat. Even a store page doesn't make a recommendation safe. In September 2025, PC Gamer reported that a streamer was prompted by his chat to download BlockBlasters, a free game on Steam that had been injected with malware in an update on August 30. He lost $32,000, and more than $100,000 in total was reported stolen from streamers, creators and crypto holders.
What a watcher can take
| On your screen | What it gives them |
|---|---|
| A Steam Guard code or an email sign-in code | A working second factor, which Valve says you should never share and Steam Support will never ask for |
| Your email inbox | Sign-in codes, password-reset links and confirmation messages from Steam |
| Backup codes | Emergency sign-in codes; Valve suggests printing them rather than storing them on your computer |
| Your account name, email address and settings | The details a recovery or phishing attempt needs |
A watcher also sees what you don't notice: a pop-up, a notification, a code you only glanced at.
With remote control, it's your PC doing it
Remote control is worse because every action comes from your own machine. Steam normally blocks trading and the Community Market for seven days on a device it hasn't seen before, unless you've had the Mobile Authenticator for at least seven days. A session run through your own, already-trusted PC never meets that check.
Attackers worked this out long ago. In September 2014, PC Gamer reported on a security firm's analysis of malware spread by a Twitch chat bot that invited viewers to a raffle for CS:GO items. Once running, it could take screenshots, add Steam friends, send and accept trade offers and sell items cheaply. The researchers said it did all of this from the victim's own PC to get around Steam's security checks for logins from new machines.
Trade confirmations still happen in the Steam Mobile app, so a remote attacker who builds a trade on your PC usually needs you to approve it. That's when the talking starts: "just confirm the verification trade", or "accept the one to your friend". Valve's scam FAQ lists trading an item away for "verification" as a scam in its own right. Whatever the excuse, the item is kept and you're blocked.
Rules that stop it
- Valve won't call, chat or screen-share. Valve says its employees never contact you about your account through any chat system, including Steam Chat and Discord, and the only way to reach Steam Support is the Steam Support Help Site.
- Only use remote help you asked for. Microsoft's rule for its own tool works for any of them: allow a connection only if you started the contact with a support service you trust.
- Don't install what a stranger sends. Valve warns never to download and run a program suggested by someone in an email or chat, and never to run anything that claims to "clean up", "optimize" or "fix" Steam.
- Stop sharing before you sign in. Never open Steam Guard codes, your email, backup codes or account settings while someone can see your screen.
- Don't trust their screen either. In the scripts Malwarebytes documented, victims were shown a supposed reply to the report and a fake certificate. An image or a shared screen proves nothing about the person showing it.
If you let someone in
End the call and close any remote session, then uninstall the tool. From a different device you trust, change your Steam password, use Sign out everywhere on the Authorized Devices page, and secure your email account. Scan the PC that was accessed for malware before you sign in on it again, and revoke any Steam Web API key you didn't create.
Then check your Trade History. If CS2 items left in trades within the last seven days, you can reverse them under trade protection, with a 30-day trading and Market cooldown as the price. If you've lost access entirely, Valve says you can always recover the account through Steam Support. Our account security checklist covers the rest.
Sources
- Steam Guard Mobile Authenticator — Steam Support
- Scam: I Have Been Reported and Will Be Banned — Steam Support
- Scam FAQ (Confidence Scams and Trade Scams) — Steam Support
- Trading and Market Restrictions — Steam Support
- Steam users: Don't fall for the 'I accidentally reported you' scam — Malwarebytes
- Twitch chat bot plagues Steam users with wallet-emptying malware — PC Gamer
- Another malware masquerading as a Steam game took tens of thousands from streamer's cancer recovery donations — PC Gamer
- Solve PC problems remotely using Quick Assist — Microsoft Support
