Staying safe when trading CS2 skins

Skins are worth real money, so scammers hunt for them. The rules below protect you from most attacks.

Updated: 13.10.2026

The most common scams

• Fake site. A page that looks like Steam or a marketplace asks for your password. The Steam login window exists only at steamcommunity.com.
• "I will buy your skin" message. A stranger offers to buy above the price and sends a link. The link leads to a fake site.
• Fake trade offer. The name and picture look like a friend's, but the account is different. The items in the offer are not what you expected.
• API key theft. A fake site gets your API key and quietly changes trade offers.
• Message from "support". Someone writes on behalf of "support" and asks for a code or password.

Rules

1. Never share your Steam password, Steam Guard code or card CVV. A real service does not ask for them.
2. Check the browser address bar. The only official GGDROPUZ address is ggdrop.uz.
3. Turn on Steam Guard mobile confirmation.
4. Before confirming a trade, read the list of items and the sender's profile. The Steam mobile app shows the sender and the contents.
5. Give your Trade URL only to services you trust. The link is only for sending offers and does not reveal your password, but know who you gave it to.
6. Never enter your Steam API key anywhere. If you already did, revoke the key in Steam.
7. Do not believe "quick profit" offers from strangers.

How safety works on GGDROPUZ

• Login is on the Steam page, we do not see your password.
• Skins move only through Steam trade offers. You see the offers in Steam and accept them yourself.
• The site does not ask for your Steam password, Steam Guard code or card CVV.
• The balance top-up payment is made on the Click page.
• Withdrawal requests to a card are reviewed.

If you meet a scam

1. Change your Steam password immediately and sign out of all devices.
2. Revoke your Steam API key.
3. If card details were exposed, tell your bank.
4. If it is related to GGDROPUZ, write to us.