Facepunch Studios has issued a critical warning for all Rust players about active scams targeting account information through fake in-game Drop notifications. These phishing attempts are designed to trick you into giving up your login credentials.
The developer's message is direct and leaves no room for confusion: Facepunch will never contact you regarding Drops. Any private message, email, or chat notification claiming to be from the studio about a missed or special Drop is a scam, full stop. Scammers are banking on the excitement around Drop events to lure players into a false sense of security.
How to Keep Your Account Secure
The only legitimate way to connect your accounts for official Drop campaigns is by using the official website provided by Facepunch during their announcements. Do not trust links shared by other users in stream chats, direct messages, or on unofficial forums. These malicious links often lead to convincing-looking fake login pages designed to harvest your username and password.
How do these Rust scams work?
These scams are a classic form of phishing. They exploit the hype around events like the recent KICK Drops by creating a sense of urgency. A message might claim you've won a rare item but need to log in immediately to claim it. By clicking their link and entering your details, you're handing them the keys to your account, potentially losing your inventory, base, and countless hours of progress.
Always be skeptical of unsolicited messages about free items. Double-check URLs, and if you have any doubt, ignore the message and check the official Rust channels for information. Staying vigilant is the best defense against losing your hard-earned loot.