TLDR
Online gamers, especially Counter Strike 2 and FACEIT users, are being targeted by convincing phishing pages that impersonate FACEIT's optional identity verification flow. Attackers register lookalike domains such as faceit discord.com or...
How it works
Online gamers, especially Counter Strike 2 and FACEIT users, are being targeted by convincing phishing pages that impersonate FACEIT's optional identity verification flow. Attackers register lookalike domains such as faceit discord.com or...
Red flags
- Domain is not faceit.com but a lookalike with extra words like "verify," "clubs," or "discord" A blurry, unscannable QR code pushing you toward a "Sign in with Steam" button Page asks for Steam credentials to prove you're not a cheater or smurf
What to do
- 1Always navigate to faceit.com or store.steampowered.com manually instead of clicking links Never ent
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/06/fake-verification-pages-are-stealing-steam-accounts-from-playersFAQ
Is Fake FACEIT verification pages steal Steam accounts via browser in the browser phishing a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Domain is not faceit.com but a lookalike with extra words like "verify," "clubs," or "discord" A blurry, unscannable QR code pushing you toward a "Sign in with Steam" button Page asks for Steam credentials to prove you're not a cheater or smurf
What should I do first?
Always navigate to faceit.com or store.steampowered.com manually instead of clicking links Never ent
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.