The short version.
Gaming accounts (Steam, Discord, Riot, Battle.net) now hold real money in the form of skins, items, and tradable inventory. Scammers — including organized rings — target teen players with fake trade windows, impersonated 'official' middlemen, fake support requests, and 'free skin' phishing links. A single Steam account drained in 2024 lost the equivalent of $60,000 in CS2 inventory. Smaller losses (a few hundred dollars in V-Bucks or Robux) happen daily.
The platforms and contexts.
Inside Steam trading, Discord servers (especially trade-themed ones), Twitch chat, Roblox, and Fortnite social features. The fake links route through phishing pages that look pixel-identical to the real ones.
The timeline.
Account theft has been around since Steam trading launched in 2011, but the professionalization (rings, scripts, multi-account laundering) is a 2020s development that scales every year.
The core facts a parent needs.
- Steam Guard and Discord 2FA are the single biggest protections — but scams now bypass them with 'Steam Authentication' phishing pages that ask for the 2FA code in real time.
- Real Steam Support never DMs you on Discord; real moderators never ask for your account password. Any unsolicited DM offering help is a scam.
- Recovering stolen accounts is slow and partial. Most companies do not refund stolen inventory.
What's actually at stake.
- Real-money loss from drained inventory or charged-back purchases.
- Account compromise that propagates — credentials reused across email, social, school accounts.
- Social manipulation as a vector into broader sextortion or criminal-network grooming (overlaps with the criminal-friend-groups trend).
Concrete next steps.
- Turn on hardware 2FA (a Yubikey or, at minimum, an authenticator app — not SMS) for the gaming and the linked email account.
- Use a separate email for gaming accounts so a leak doesn't cascade into the rest of the family's accounts.
- Set the household rule: any 'official' message asking for credentials or 2FA codes is a scam, no exceptions. Even legitimate-looking ones.
See it for yourself.
Steam Support, Discord Trust & Safety, and the platform-specific recovery flows · FBI ic3.gov for losses over $100 · Local police for identity-theft documentation.