I don't know about you guys but I always look at the rep and country under a user's name when trading or doing anything involving money. Also, I have to laugh seriously at those of you advocating banning or reporting IP addresses when a majority of them are going to be dynamic not static. Unless, of course, you want GOG to send a letter to a grandmother who happened to have an IP address used by a scammer the day before.

Common sense is the only antidote to being scammed.

This is part of the issue; those features aren't visible in PMs.

I am quite amazed, how some people are willing to trade so easily and be so careless, while this is going on.

This is why it's best to see if the same person made a public offer on a giveaway thread or something of the sort. Or just trade with people you know. Or even examine the writing style, the way sentences are constructed anything. Seriously speaking, I have no idea why people aren't MORE suspicious on the internet than IRL...

Up until recently this community was spotless, lots of people lowered their guard and felt they were safe here...

And this is why you never lower your guard no matter what. Because once you get complacent, that's when scammers move in for the kill. Also, I wouldn't let a few assholes ruin the feeling of a good community. The sign of a truly great community is one that learns to sniff out the scammers and shame them publicly.

What would come in handy would be if you could look at something like show all posts by user (available on vbulletin boards), that way you could tell if it was the legitimate user or someone pretending to be them.

Ah well, going to be doing a trade with the genuine K_1269 later tonight or first thing in the morning, awesome user :)

I know what are you talking about. I never let my guard down but I don't blame people who lowered theirs here because gog really was like some message board from the beginnings of the internet.
Judging from what I've seen so far, it's just one guy, trying to snag as much loot as he can. Since he insists doing it even now just tells me he's a beginner in this line of work XD

Well, let's say someone impersonated wpegg, for example. Look at wpegg above our posts. Surely, there are ways to tell the fake from the real one, like the rep count and join date. (sorry for singling you out for the example, wpegg).

Why is common sense so damn rare?

Anasto and friends are only interested in Steam games, so only Steam codes have been scammed as far as I know.

I made a thread for genuine members that have been impersonated to post in and hopefully warn other users by doing so. You can find the thread here:

http://www.gog.com/en/forum/general/ive_been_impersonated/post1

Can you tell me how I would go about acquiring one of these codes, and how I would redeem one? I'm keen on discovering how you would validate a code is real before trading it.

Because it's turned off by trust, that's how social engineering works. You wouldn't believe how far can you get over a simple telephone line by establishing trust/basic rapport with the person you are talking with.

Sorry, I'm not used to using steam for anything other than direct purchases. Am I able to redeem a code online (i.e. not through the client). Is there a step before hand that tells me what I'm redeeming?

To put this in perspective, I'm trying to write a web request that will confirm a steam code, and will say what it's for. I intend to do this by sending http requests to steam in the form that would be done if you're browsing the site, and then parsing the response.