Someone will add you and tell you something along the lines of "My friend wants to add you for a trade, but he can't, here's his profile," and send you a link to steamcommunity, except it will be something like steancommuuity or steamcommunitlly. Don't click the link no matter what.
This type of phishing I noticed when I started posting trades on Bazaar.tf. As soon as I would post a new trade, I'd get two people adding me at the same time, saying the bit about a friend wanting to trade. Sometimes, they'd send the same links, and sometimes they'd send different links.

These users are not players, they are bots. Usually they have private profiles, or very few games and very few hours in those games.

So, someone has contacted you saying their friend would like to trade you. Do Not click their link!
Copy the entire chat and save it to a text file, like Word or Notepad. Give them a nickname like (phisher) and block them. Next to their name in friends is a little arrow with "Add Nickname" and "Block All Communication" When they are blocked, you should see this: Go to their steam profile, (arrow next to their name, then steam profile) then go to More Options, then to Report Abuse. Click "Suspected Hijacker/Phisher" option. Give a brief description of the event, and paste the chat into the bottom. You are done, and Valve should take care of the rest. If you want to, you can go on SteamRep and report them as well, to stop other users from associating with them immediately.

Okay, here's 3 examples of phishers. I don't have screenshots, but I have the text with timestamps.
Do NOT click any of the links in this!
My First time dealing with a phisher

9:26 PM - koalad: Hey mate.
9:26 PM - mattpunk: Hello
9:26 PM - koalad: My friend wanna trade with you.
9:26 PM - koalad: Add him please
steancommuuity.com/profiles/76561198043601405
9:26 PM - mattpunk: okay
9:27 PM - koalad: But he can't add you for some reasons.
9:27 PM - koalad: He's waiting for you right now!
9:27 PM - koalad: Thx bro.

Notice how instead of being steamcommunity, it's steancommuuity. Although it looks like I'm going to be phished (when I said okay) I noticed something was wrong. I pasted the link into my internet browser and corrected the misspellings, taking me to a user who wasn't even on koalad's friend's list. I asked a friend of mine what to do, and he told me how to deal with a phisher.

These next two happened right after I posted a trade to bazaar.tf.


1:45 PM - Vlad: Hey, my friend cant add you,please , add him, he wants trade for you http://steamcommunitlly.com/id/JamesBond

Notice the steamcommunity address is messed with as well.

This is the same message from a different user
1:45 PM - cms82hac: Hey, my friend cant add you,please , add him, he wants trade for you http://steamcommunitlly.com/id/JamesBond

I'm not censoring the name of these users, as they are bots. Not every person with these names are phishers, but watch out for them.

Thanks for reading my guide, I hope I helped you not get hijacked or phished.
This is my first guide, sorry if I messed the images up and made them awkward.
I don't own the image of the fishing pole coming out of the computer screen. That can be found here: http://home.mcafee.com/advicecenter/?id=rs_na_sp13article3&ctst=1
If you see me in game, be sure to say hi.
Bye now!