EXBO published a detailed security guide for STALCRAFT: X players, covering account protection, malware, phishing, and the scams that can target traders inside STALZONE. The guidance appeared in an official Steam announcement and includes several steps players can take before something goes wrong.
The guide starts with a simple warning. A tempting reward, discount, giveaway, or “exclusive” message may only be bait designed to make someone open a dangerous link. That link could lead to a fake login page or deliver malicious software instead of the promised prize.
Protect your EXBO account
EXBO recommends using two-factor authentication with an authenticator app. The app creates one-time codes for account logins, adding protection beyond a password. Email-based authentication is also available, but it offers less protection if the email account itself is not secured.
EXBO’s two-factor authentication support page provides more information about the setup process.
Players should also activate the Security Code for each character. The game can request this code before actions that could remove valuable items or cause another permanent loss. It can also be configured to appear immediately after entering a character.
The code is required only once during each game session. It can protect actions such as:
- Trading with other players
- Using the auction
- Using in-game mail
- Handling artifacts and other valuable items
- Selling items to Zen, the season merchant
- Trading with the gear merchant
- Actions involving subdivisions
- Leaving a faction
Players can use either a six-digit password code or one-time codes from an authenticator app, such as Google Authenticator. Two-factor authentication protects access to the account, while the Security Code adds another barrier around the character and its belongings.
Use unique passwords and avoid suspicious files
A long, unique password makes guessing and credential-stuffing attacks harder. EXBO recommends combining uppercase and lowercase letters, numbers, and special characters, then using a trusted password manager to keep track of different passwords.
Players should never give their passwords to friends, strangers, supposed administrators, or support staff. EXBO says its support service will not request that information. Anyone asking for a password should be treated as a scammer.
Malware stealers can take browser passwords, Discord access, screenshots, and keyboard input. They generally reach a device after someone launches an infected file. In STALZONE, EXBO identifies cheats, downloads from unreliable websites, and fake EXBO or STALZONE pages as common sources.
Mods, FPS boosters, macros, private builds, launchers, and other utilities from unknown websites, file-sharing services, or private chat groups can carry the same risk. A recommendation from another player does not prove that a file is safe. Players should download software from official developer sites and trusted sources, keep antivirus databases current, and avoid running files that look suspicious.
Common STALZONE scams
Many scams begin in chat and rely on urgency, trust, or the promise of a quick profit. EXBO’s examples include requests to open Windows Command Prompt or PowerShell, download a “cheat check,” or visit a mirror site before joining a clan. Players should not follow those instructions or run commands supplied by strangers.
Phishing messages may pretend to come from a clan member and ask players to vote, read an important notice, claim a reward, or visit a forum. Fake websites can copy the look of EXBO resources while collecting login details or session tokens. Players should check every character in a web address before entering account information.
EXBO also warns against account-sharing requests disguised as friendly offers. A scammer may promise access to another account, offer to try out gear, or claim they need temporary access for a tournament or leveling help. Sharing an account violates clause 4.1.2 of the Licence Agreement, and it can limit recovery help if the account is lost.
Another trick involves manipulating the exchange window. A scammer may replace a rare artifact with a cheaper one, remove a zero from the payment, or repeatedly cancel an exchange while claiming that the window is malfunctioning. Always check the exact item and payment before confirming. If someone pushes you toward a courier or asks you to send an item first, stop the deal.
Why courier deals and fake giveaways are risky
EXBO advises players to avoid buying items through courier deliveries. A scammer may claim that the buyer and seller are in different locations or that the payment is on another character. The promised workaround can end with the player sending currency or an item and receiving nothing.
Direct exchange is the safer option for in-game deals. Players should also be wary of so-called warrantors, especially bots that claim to guarantee a trade. EXBO describes those offers as a warning sign rather than a safety measure.
Giveaways can be used to collect entry fees or valuable items. A player claiming to be a streamer may promise an expensive reward, while another scammer may offer a deal such as sending back twice the amount of in-game currency. The guide recommends using the in-game auction instead of trusting an unknown giveaway.
Requests to reroll artifacts for a deposit, sales of supposedly rare promo codes, inflated “profitable” trades, and account swaps follow the same pattern. The safest response is to decline, verify prices through the in-game systems, and avoid sending anything first.
What to do after an account breach
If someone gains access to an account, the game website offers a way to reset active sessions. This ends the authorizations connected to the profile and invalidates existing login tokens. Two-factor authentication remains important because it can stop the intruder from signing in again with a stolen password.
Players should change their password after recovering access and report suspicious users through in-game chat or the EXBO support website. Official representatives will not ask for confidential account data. Promotions, contests, and promo codes should come through verified EXBO resources, and codes are activated in the game rather than through a third-party website.
The quickest security checklist is straightforward: activate two-factor authentication, set a Security Code for every character, use a different strong password, avoid unknown files and links, and keep trades inside the game’s direct exchange tools.
Share your thoughts in the comments, and follow us on X, Bluesky, YouTube, and Instagram for more gaming updates.
Stalcraft: X
Developed by EXBO
