Battlefield 6 Hype Is Fueling Fake Playtest Invites — Don’t Let Scammers Jack Your Steam

Why this caught my eye

Battlefield hype season is officially here, and right on cue, the scammers have spawned. A French PSA making the rounds sums it up: “Scammers are exploiting the excitement for Battlefield 6, set for October 10, by sending fake playtest invites via a fraudulent domain (ea.6-battlefield.com) to steal Steam credentials.” That tracks with what we’ve seen around every major beta in the last few years-from CS2’s limited test to Overwatch 2 and The Finals. The play is always the same: dangle early access, harvest your login, sell your account or items, disappear.

• Key takeaway #1: Any “Battlefield 6 playtest” link that isn’t on an official EA or Steam domain is a hard no.
• Key takeaway #2: The beta schedule is public-nobody needs your password to “whitelist” you.
• Key takeaway #3: Real invites never force you to log into Steam via a sketchy third-party page.
• Key takeaway #4: If you slipped up, you can still lock things down fast (steps below).

Breaking down the scam

The current phish uses a domain made to look legit-something like ea.6-battlefield.com. The trick is in the dots: the real domain is everything after the last dot pair. So “6-battlefield.com” is the actual domain here, not “ea.com.” The site imitates an EA announcement, then pushes you to a fake Steam OpenID login, often grabbing your username, password, and even your Steam Guard code. Once they’ve got the code, they can hijack your session, change your email, yank Steam Guard, and drain your inventory or lock you out. Some variants also fish for your EA Account, which is a double hit if you buy Battlefield on PC.

Red flags to watch for: domains with numbers/dashes jammed into brand names, “quick verification” timers, QR codes for login, or support chats that immediately ask for a Steam Guard code. Professional-looking pages mean nothing—phishing kits are slick these days.

What’s actually official for Battlefield 6

Here’s the legit picture: Battlefield 6 is slated for October 10, 2025, with a multi-phase beta in August. Early access windows are tied to official programs like Battlefield Labs sign-ups and partnered Twitch Drops during the multiplayer reveal, followed by open beta dates for everyone. None of that requires a third-party site or some back-alley “invite code.” You’ll grab the beta through the EA app, Steam, or your platform’s official storefront—period.

As a rule of thumb, EA uses domains ending in ea.com (think subdomains like accounts.ea.com or playtesting.ea.com), and Steam uses steampowered.com or steamcommunity.com. If the final two chunks of the URL don’t match those, it’s not official. “Battlefield” branding usually routes through EA’s ecosystem—again, not some hyphenated clone.

Spot the phish in 30 seconds

• Check the root domain: it must end in ea.com, steampowered.com, or steamcommunity.com. Anything else is out.
• Never log in after clicking an email or DM link. Open the EA app/Steam client or use your own bookmark.
• Beware “playtest” sites that ask for Steam Guard codes. Real OpenID flow hands auth to Steam directly.
• Ignore “urgent” countdowns and exclusivity claims. Betas have public windows—FOMO is their weapon.
• Don’t scan QR codes from strangers. QR phishing is a thing, and it bypasses your usual link skepticism.
• Creator invites come through official EA Creator/Playtesting channels, not random Gmail or Discord DMs.

If you clicked already, do this now

• Change your Steam password and enable Steam Guard Mobile if it’s off.
• Deauthorize all devices (Steam settings) and log out everywhere.
• Revoke any Steam Web API keys and check for unfamiliar authorized apps.
• Verify your email and phone on Steam and your EA Account; change those passwords too.
• Reset your Steam Trade URL and consider a temporary trade hold if you have a valuable inventory.
• Run a malware scan—some pages try to push token-stealing loaders.

Why this keeps happening (and why Battlefield is a target)

Betas are fertile ground for scammers because they combine FOMO with ambiguity. Studios stagger access in waves, creators tease exclusive drops, and timelines shift—perfect cover for bad actors to invent “private tests” with official-sounding names. Battlefield, especially, brings big player counts and a hungry PC audience with tradable Steam items and long-running EA accounts. That’s a lucrative market for credential thieves. We saw this play out during CS2’s limited test and again around The Finals’ closed betas—same tactics, different logos.

The gamer’s perspective: excitement, not exploitation

I love a good Battlefield beta because it’s the last chance to feel the chaos before launch-day patch storms. But let’s be real: no early access is worth losing your library. If a site promises “instant whitelist” or “creator-only slots” and then punts you to a knockoff login, bail. Bookmark the official game page in the EA app or Steam, and check there first. The real flex this August is dropping into the beta with your account intact, not donating it to someone running a cookie-stealer from a rented VPS.

TL;DR

Scammers are blasting fake Battlefield 6 playtest invites from a spoofed domain to nab Steam logins. Don’t click. Use only EA/Steam official domains, grab the beta through the EA app or Steam, and ignore any site asking for your credentials. If you already bit, lock down your accounts immediately.