Every skin you buy from a store or a friend arrives the same way: a Steam trade offer. To send you one without being on your friends list, the sender needs your trade URL. It is the address of your inventory. Here is where it is, what it does and what to do with it when something feels off.
Where to find it
- Open Steam and go to your Inventory.
- Click Trade Offers.
- Click “Who can send me Trade Offers?”.
- Scroll down to Third-Party Sites. Your trade URL is in the box there, next to a Create New URL button.
The same page exists in the Steam mobile app and in the built-in browser of the desktop client. It is your account’s page, so you need to be logged in to see it.
What the URL contains
The link starts with steamcommunity.com/tradeoffer/new/ and carries two parameters.
| Part | What it is | Can it change |
|---|---|---|
| partner | A number tied to your Steam account | No, it stays with the account for life |
| token | A short string of letters and digits | Yes, every time you click Create New URL |
The partner number tells Steam whose inventory the offer goes to. The token is the permission. Together they let someone open the trade window with you without a friend request first. That is all the URL does. It does not give anyone access to your account, your items or your password.
What the URL cannot do
People worry about sharing it. The worry is misplaced. A trade URL lets someone send you an offer. It does not let them accept it. Every trade still needs your click in Steam and, with the Mobile Authenticator set up, a confirmation on your phone. Nobody moves an item out of your inventory with the URL alone.
The one thing a stranger can do with it is send you unwanted offers. If that starts to happen, reset it and the spam stops.
When to reset it
Create New URL kills the old link on the spot. Any offer that was sent to the old one fails. Reset it when:
- You typed your Steam login into a site you now think was fake.
- You get trade offers from accounts you have never dealt with.
- You once gave the URL to a trading bot or a site you no longer use.
- You are cleaning up after any kind of account scare, along with changing the password and checking which devices are logged in.
Do not reset it while an order is on the way. If a store already has your URL and the offer has not arrived yet, a reset means the offer will be sent to a dead address. Wait until the item is in your inventory, then reset if you want to.
The API key is a different thing
The trade URL gets blamed for a scam it has nothing to do with. Steam accounts can hold a Web API key, created on the developer page of the Steam Community site. A phishing site that captures your login can create one in your name. With it, a script can watch your incoming offers, cancel the real one and put up a fake from a look-alike account.
So when you check the trade URL page, also open the API key page and look. If a key is registered and you did not make it, revoke it. If you never registered one, the page should say so. That check takes a minute and it closes the door the trade URL is wrongly accused of opening.
Why a store asks for it at checkout
A store cannot send an item to a name. It sends a trade offer, and a trade offer needs a destination. On PrefireSkins the trade URL you enter at checkout is where the offer goes. Nothing else about your account is needed, and nothing else should be asked for.
Two habits protect the order.
- Copy the URL from the Steam page, not from memory or from an old message. A URL copied from a friend’s account sends the skin to your friend.
- Check the partner number in what you pasted against the one on the Steam page. Same number, right account.
If you reset the URL after ordering, write to support@prefireskins.com with the new one and the order number. Until the trade is accepted you are covered by a full refund, so a wrong URL costs time, not money.
Reading the offer when it comes
The URL got the offer to you. Reading it is still your job. Your side should be empty. The item should match the listing. If anything looks different, do not accept, and ask.
The trade URL is public information. Your login, your password and your Steam Guard codes are not. Anyone asking for the second group is not a store.
