They'll use accounts that fell for it, friends and such, then give you a link to a steam community site that looks real but isn't. It will ask you for a login, don't log in, its a scam to get your account info.
Yar, I was Steam'd this by my friend kaz.