"NOTE: See also How to spot a TF2 "Phishing" scammer (and what to do about it)

Typical TF2 Phishing-Scam Script:

This is the goal of the entire conversation = to get you to visit their web-site, which will prompt you to enter your Steam credentials - which of course is how they steal them! Beware of most (if not all) sites asking for your Steam credentials. There is a legitimate usage, using Steam's "Sign-on through Steam" feature. But, don't do that if you do not know the site very well (maybe the SourceBans page for YOUR own team, etc.).

Although this example is targeted for TF2 players, the technique could be used for players of basically any Steam-hosted game. The goal is the Steam credentials (login and password), which game is just the vector - the bait.

Unfortunately, the person you are talking to in these attempts, may actually being using the Steam accounts of previous victims."