Team Fortress 2

Team Fortress 2

302 ratings
How to Not Get Phished
By Jamiek
Over my time playing and trading in Team Fortress Two I have seen many different kinds of sharkers, scammers and other people who are out to make a quick buck and ruin someone else’s day.

The main one I hear about now though, is phishing. Far too often I see stories of people who click on links on trading websites, logged into what they thought was steam and proceeded to have all their hard earned items stolen. They then have to go through steam support and if they do get their items back (they usually do, valve are cool like that) they are worth much less than they were due to being duped.

This annoys me on two levels, mostly I am annoyed at the people who are cruel enough to do such and thing and cause such unnecessary grief to people just to earn some online item. But also, it is very easy to catch with a trick that I think goes far too unnoticed despite the fact that it is one of the best tools out there for stopping this.
   
Award
Favorite
Favorited
Unfavorite
What is Phishing
Phishing is the act of send someone a link to a fake site disguised as a real site of a company or business, on this fake site they will then have to log in or enter details and when they do so the scammer will have their details / logons for the actual site.

In terms of Team Fortress 2 and Steam in general this usually involves sending someone a link that looks similar to that of steamproxy.com and then when the victim logs in the scammer will have their steam login and be able to access the victims account and trade anything of value in their backpacks to one of the scammer's acounts.

As you can see in this photo these links are often found on trading sites such as outpost but the links are also often sent out in messages to friends of an account that a phisher has hacked
What can you do about it
Now there is a small script that can sort this whole problem out, it is in my opinion one of the best but most underused tools for traders out there. Jessecar's Steam Community Suite.

This brilliant piece of code works using tampermonkey (if on Google Chrome) or greasemonkey (if on Firefox) user scripts and will mean that you are never fooled by a fake steam link again.




As you can see, this tool checks the webpage to see if you are dealing with the real Steam Community site and will display a huge warning if you are dealing with a fake. This makes it almost impossible to be fooled by a fake Steam link ever again.







But not only does it do this but it goes further, if you happen to be on Outpost, then the script will warn you about a fake link before the fake page shows up.








And even for extra peace of mind it will show a large green bar when you are on the real Steam Community just to let you know you are all good (how considerate)





It also comes with a load of other handy tools and changes for traders including:
  • Showing the Steam ID of the account you are viewing
  • Showing the account's steamrep status
  • Giving you links to a ton of community website for that user
This is a userscript developed by the creator of scrap.tf. To use a user script you need a certain plugin depending on what browser you are using. Below are tutorials on how to install the plugins and this userscript.

Also I hope you like big red boxes to highlight stuff you need to do in images because there will be a lot of them coming up in the tutorials (pro paint skillz).
How to Use This Tool (for Google Chrome Users)
Part One
Firstly if you already have tampermonkey then please proceed to Part Two

To install this script for Google chrome you are first going to want to go to the Chrome web store.
You can get to this two ways

  • You can get to this by going to your tools menu that you see when you click the ≡ button underneath the X in the top right hand corner. Then click extensions, scroll down to the bottom of the page and click "Get More Extensions".

  • Or you could just follow this link https://chrome.google.com/webstore/category/apps
P.S. Sorry to the 99.9% of you who did not need to have this explained to them but if I don't do this someone will ask in the comments and I will have to do it later

Now simply search for tampermonkey, the screen should come up like this:
Simply install the highlighted extension and then you are ready to begin Part Two

EDIT: After a few people have claimed they cannot find tampermonkey the direct link is here: https://chrome.google.com/webstore/detail/tampermonkey/dhdgffkkebhmkfjojejmpbldmpobfkfo?hl=en

Part Two

Now you have done all of Part One you should have tampermonkey successfully installed

Now comes the easy bit, go to http://jes.re/suite and simply click the big "Download Latest Version" button.

You should now see a screen like this:
Simply click "ok"



Now you should be up and running, if you want to check whether the script installed correctly just click the tampermonkey icon in the top right hand corner.








Then click "Dashboard".





If everything went correctly you should see the script show up like this:

If this happened, congratulations, you will never be phished on steam again (or ever if you have never had it done too you before). If you would like to test this new script then you can go to a cached copy of the steam community via google and it should show as a fake page and display a large warning as per the example.
How to Use This Tool (for Firefox Users)
Part One
Firstly if you already have Greasemonkey then please proceed to Part Two

To install this script for Firefox you are first going to want to go to the Firefox add-ons managers.
You can get to this two ways:

  • You can get to this by going to your Firefox top left menu and then selecting add-ons.

  • Or you can hit Ctrl + Shift + A


After this you are going to want to go the the search menu and search for Greasemonkey.
Your result should show like this:
Now you are going to want to install Greasemonkey (this is what is going to allow us to apply userscripts like the one I showed you earlier)

Part Two
Now you have done all of Part One you should have tampermonkey successfully installed

Now comes the easy bit, go to http://jes.re/suite and simply click the big "Download Latest Version" button.

If everything has gone correctly then you should see this screen:
Simply click the "Enable and Install Script" button (unless it isn't there so you just press the "Install" button obviously).

You should now see this:

Just hit install and you are done.

If you want to confirm your install just click the "(i)" button in the top left hand corner. If all is well then you will see this:
If this happened, congratulations, you will never be phished on steam again (or ever if you have never had it done too you before). If you would like to test this new script then you can go to a cached copy of the steam community via google and it should show as a fake page and display a large warning as per the example.

P.s. Just a note, the developer of the script says that some of the features have been reported to work incorrectly on firefox and recommends Chrome, however having used both I have never encountered a problem, at least not with the security features.
How to Use This Tool (for Internet Explorer Users)

Credits
The only real credits for this can go to Jessecar for making this amazing userscript. I also stole used a couple of images from his site (the demonstrations of the script in action at the beginning of this guide). Thanks for the amazing work on not only this but scrap.tf, your trade bots and any other projects I may be unaware of. Keep up the good work, the community really appreciates it

I would also like to ask the readers of this that if you do notice any spelling or grammar errors then please do point that out (me being dyslexic and dyspraxic, it means I often mistype and then cannot see them when I go to read through). I would really appreciate it as I like to have my work look as good as it can.

Other than that all I can say is that this has been my first guide and I hope you enjoyed it.

- Jamie Kershaw

Sorry if this guide comes across as rather simplistic or you dislike the fact that I have included picture demonstrations of quite lot of things that 99.9% of viewers of the guide will not need to reference the pictures on. But I know from looking at other guides that if I do not include them I will get questions about such things in the comments (I may still get them now) which means I would either have to explain it all constantly to people who ask me or I could just include this now, this seemed like the better option.
180 Comments
Tony Blessing 26 Sep, 2017 @ 12:34pm 
Tear this shit down then nigga the fuck you thinking nigga
Jamiek  [author] 26 Sep, 2017 @ 9:31am 
yeah no shit mate, it's over 3 years old and incredibly outdated.
Tony Blessing 25 Sep, 2017 @ 7:53pm 
lol this guide is like 2 or 3 years old
76561197973816072 24 Jan, 2016 @ 2:47pm 
if you don't have botnet installed you're shit outta luck because the developer is anti-firefox for some reason
tankwarfarer 21 Dec, 2015 @ 4:42am 
How do I know that this whole guide / thing was a phish?
bit_noobish 10 Dec, 2015 @ 10:48pm 
▉▉▉▉▉▉◤┳◥▉▉▉▉▉▉ You have been visited by the Loominati.
▉▉▉▉▉◤┳┻┳◥▉▉▉▉▉
▉▉▉▉◤┳┻┳┻┳◥▉▉▉▉ Copy and paste this on the walls of the 5
▉▉▉◤┳━┳━┳━┳◥▉▉▉
▉▉◤┳┃┈╰━╯┈┃┳◥▉▉most MLG m80s you know or you
▉◤┳┻╰━━━━━╯┻┳◥▉
◤┳┻┳┻┳┻┳┻┳┻┳┻┳◥ will be qu1cksc0p3d by #FaZe Clan
mick 25 Nov, 2015 @ 12:32pm 
Hi, I was recently phished/hijacked through someone asking me to join a teamspeak, which required a plugin. I downloaded the plugin which ended up being a virus.

Could you and anyone reading this please forward this new form of hijacking on to anyone, as I don't want anyone to receive the same fate.

Regards,
Mickel.
Randompieguy3 23 Nov, 2015 @ 2:53am 
You no longer need tampermonkey! You can get the app directly from the appstore! https://chrome.google.com/webstore/detail/steam-community-suite/gicnbiillhmpffbemfhmhnelldbnjblb (Toots not fake link)
Actually its not a fake link its the real link check the steam checker thingy, being serious.
Don't trust me just search "Steam Community Suite" on google chrome apps thingy. :D
Papapo 4 Oct, 2015 @ 8:58am 
ill stick to not pressing links from steam acounts with no picture and games
2001 AU Falcon 2 May, 2015 @ 5:29pm 
hey i want to trade with you please go to this totally not fake link and enter your username and password into this totally not fake site