- Log into your Steam account only via Steam or platforms you are confident about.
- Always check a website link you are about to click. Pay attention to the connection type (it should be HTTPS rather than HTTP) and URL. Remember that scam sites often use slightly misspelled URLs of legit platforms.
- Change your Steam passwords regularly. You can change your Steam login credentials by clicking “Forgot Password” when logging in to Steam or selecting “Change Password” in your Steam client setting/preferences. The first option is preferable since it allows you to continue trading on Steam without a trade suspension period.
- Verify trade offers. Visit your Steam user page and go to https://steamcommunity.com/my/tradeoffers/sent/ every time you have offers to be confirmed via your mobile phone or email.
- Revoke your Steam Web API Key on https://steamcommunity.com/dev/apikey if you suspect that your account may be at risk
- Install the DMarket Trust Shield - it's a free Chrome extension, designed to detect fake bots and suspicious trades to help protect your account.
- Use an official DMarket mobile app. If notifications are enabled, it will alert you instantly about any potentially dangerous trade.