Is It Safe to Buy a Rust Account?

What Steam's rules say

Section 1.C of the Steam Subscriber Agreement says you may not share your password or account, and that you may not sell or charge others for the right to use your account, or otherwise transfer it. Valve can restrict or terminate accounts that break the agreement.

So if a bought account is taken back or closed, Steam Support will not side with the buyer: it helps the account's original owner. Your protection has to come from how much control you get over the account and from where you buy it. See also whether selling game accounts is legal.

Rust's own rule: no ban evasion

Facepunch, Rust's developer, says an Easy Anti-Cheat ban stops the account from playing Rust on EAC-secured servers, shows on the Steam profile as a game ban and is permanent unless it is overturned on review. It also says that using another Steam account to get around an active game ban is ban evasion, and that accounts used to evade a ban face further action, including permanent game bans.

If you are buying because your own account is banned, that is a risk you take on yourself: the new account can be banned for evasion. Buyer protection covers an account that doesn't match its listing or stops working through the seller's fault, not a ban earned on the account after delivery. An account that already has a ban can't be fixed either, which is why the ban record is the first thing to check.

The real risks, ranked

Risk	Why it happens	How to reduce it
The account was stolen	Steam Support can return a hijacked account to its original owner	Avoid accounts taken through phishing, brute force or malware, and be wary of cheap high-hour accounts
Someone else has Steam Guard	A copy of the authenticator (.maFile) can still confirm sign-ins and trades	Move Steam Guard to your own phone and deauthorize all other devices
Someone else controls the email	Password resets and codes go to the account's email	Change the contact email to your own on day one
A ban is earned for evasion	Facepunch bans accounts used to get around an existing ban	Don't use a bought account to play around a ban
A ban is already on record	VAC bans and Rust EAC bans are permanent	Check the profile for VAC and game bans before you pay
Valve closes the account	The Subscriber Agreement lets Valve restrict or terminate accounts	Nothing removes this risk; keep it in mind before you spend on the account
Payment goes to a scammer	Paying a stranger directly leaves nothing to dispute	Pay through a service that holds the money until you have checked the account

Why stolen accounts are the main problem

Steam says accounts are often taken after their email has been compromised, or through malware such as keyloggers and spyware that capture the account name and password. Phishing pages that copy Steam's sign-in or trade pages are another common route. Steam's help site walks the owner of a hijacked account through recovery, and Steam Support can restore the account once that person proves they own it.

A stolen account is a bad buy even if it works on day one: when the original owner recovers it, the buyer loses it. Marketplaces that buy from suppliers often know an account's origin; ask, and walk away from accounts that were brute-forced, phished or stolen with malware.

Steam Guard and the .maFile

Many Rust accounts come with Steam Guard as a .maFile, the data file of a mobile authenticator used by apps such as Steam Desktop Authenticator. It generates the codes that approve sign-ins and trades, and it holds the authenticator's revocation code. Anyone who kept a copy can keep using it, so the authenticator should end up on your own phone.

Steam's own advice applies: never give anyone your password, an authenticator code or an SMS recovery or removal code. Moving the authenticator to your own phone (Move Authenticator in the Steam Mobile app) pauses trading and the Community Market for 2 days; removing it instead blocks them for 15 days. Steam does this to protect the items on a newly secured account, and playing Rust isn't affected.

Day-one checklist after you receive the account

1. Move Steam Guard to your phone. Sign in to the Steam Mobile app, confirm with a code from the current authenticator and choose Move Authenticator, then save the new recovery code somewhere safe.
2. Change the contact email to your own and verify it; with the authenticator on your phone, you approve the change in the app. Our guide on how to change your Steam email covers each step.
3. Change the password to one you don't use anywhere else. Steam sends the confirmation code to the email, which is now yours.
4. Add your phone number under Account details. Valve recommends it because it makes recovering the account easier; note that Steam may treat accounts sharing one number as the same identity.
5. Deauthorize all other devices from Account details > Manage Steam Guard, so no old session stays signed in.
6. Check the profile: no VAC or game ban on record, a Steam level above 0 (not limited) and the skins you paid for in the inventory.

Before you pay, our guide on how to check a Rust account before buying goes through the listing itself.

What a Rust listing on BuyAccount shows

Each Rust listing shows the Rust hours, kills and deaths when Steam reports them, the Rust skins with their Steam Community Market prices, the Steam level, the registration date, the other games played on the account, the account country, Community Market access and any temporary trade hold, all read when the listing was published.

Listed accounts have no VAC ban and no game ban on record, are not limited and have no community or trade ban. We don't list accounts taken through brute force, phishing or malware, or accounts recovered through support. You get the Steam login and password plus the Steam Guard .maFile, payment is held until you confirm the account works, and every order has 14-day buyer protection. See our buyer protection page.

Frequently Asked Questions

Can Valve close a bought account?

Yes. The Steam Subscriber Agreement doesn't allow selling or transferring accounts and lets Valve restrict or terminate accounts that break it. Full control of the login lowers the practical risks, but no account bought against the rules is risk-free.

Can the seller take the account back?

They can try, through the email, a copy of the authenticator or, as the original owner, Steam Support. The day-one checklist closes the first two; not buying stolen accounts is the only answer to the third.

Will my Rust hours and skins stay on the account?

Yes. Playtime, stats and inventory items belong to the Steam account, so they stay with it. Trading and Market listings pause for 2 days after Steam Guard is moved to a new phone, or for 15 days if the authenticator is removed instead.

Compare accounts by hours, kills and skins on our Rust accounts page.