Is It Safe to Sell TF2 Keys for Crypto? Scams to Avoid

• Phishing logins. A fake "Sign in through Steam" popup that is not on steamcommunity.com steals your password and Steam Guard code. Real OpenID login always opens Steam's own domain; check the address bar every time.
• Impersonator bots. Someone sends you a trade offer that looks like the marketplace bot, hoping you accept it instead of the real one. The cure is a verification code: the site shows one, the genuine offer message contains the same one.
• Middleman scams. On Discord and Reddit, a "trusted middleman" offers to hold your keys while the buyer pays. The middleman and the buyer are the same person. A marketplace with automated bots needs no middleman at all.
• API key hijacks. If a phishing site ever captured your Steam Web API key, a script can cancel your real trade offers and re-create them to a look-alike account. Revoke any key you did not create at steamcommunity.com/dev/apikey and never accept an offer that was silently re-sent.
• Wrong-network payouts. Sending USDT on one network to an address that only accepts another is a loss no one can reverse. Match the network on the payout form to the one your wallet or exchange shows.
• Rates that are too good. A site paying well above every other marketplace is usually paying nothing at all. Compare against the live key price.

• Steam OpenID sign-in: you authenticate on Steam's page, Clover never sees your password and there is no Clover password to leak. No account, email or password is created.
• Verification code on every trade offer: the code shown on the site must match the message on the offer before you accept.
• Automated bot trades only: keys go from your inventory to a Clover bot by ordinary Steam trade offer, no middleman, no 'send first' requests from a person.
• All-inclusive quote before you commit: the amount on the swap form is exactly what reaches your wallet.
• Keys stay on your balance if a swap cannot complete, and funds from a failed exchange leg return to your refund address.
• Anonymous Mode routes swaps through privacy-first exchange partners only, so your IP and location are never shared.
• Live support chat on the site and an active team on Discord who can look up any swap by ID.

• Log in only through the Steam button on the site and confirm the login page is steamcommunity.com.
• Keep Steam Guard Mobile Authenticator on; it also protects your trades from being held.
• Start the deposit yourself on the site; never accept an unsolicited trade offer.
• Match the verification code, the bot account and the item list before accepting.
• Paste your own address from your wallet or exchange and pick the matching network; save it after the first successful payout.
• Check that a refund address is set when the form asks for one.
• Ignore anyone who contacts you first claiming to be support; use the chat on the site or the official Discord.

Do not accept the offer. Decline it in Steam, then open the support chat on the site or ask on Discord with the swap ID. If you suspect your Steam account was phished, change your password, revoke your Web API key at steamcommunity.com/dev/apikey and deauthorize all other devices from Steam Guard settings, then check your trade offers and trade history for anything you did not start.