There are few things you can do to ensure you always visit only legitimate sites: Always check website URL - there is only one RL Exchange - https://rl.exchange Do not trust websites asking you to log in before accessing content When you log in, always make sure you are on real https://steamcommunity.com page Whenever possible, use browser autocomplete feature to fill password fields If you happen to fall victim of items theft despite following these steps, contact Rocket League support to retrieve untradeable copies of your items.