Hacked through TRADEIT.GG

[ハリソン]

Probably the 4th/5th time
trading with this website, but upon receiving the trade offer, the initial one was immediately cancelled and a new trade where i receive nothing was then accepted, 1.2k worth of skins gone, and yet a secure website and all my security procedures just effortlessly bypassed. “strong password”, 2fa and steam guard. How can this even just happen

[LTJ]

This is why Steam has their Steam Market to buy skins. Don't use 3rd party sites.

[akiuara]

Why would you use a third party site for buying skins? steam recommends to use steam market cuz it is the only market that provides 100% safety when buying items plus it is your responsibility to secure your own account, steam support can't help you with your concern.

[Deadoon]

You logged into a fake site, or you got token grabbed by some malware.

[alexbprofit]

api scammed

[sneape]

Originally posted by Eren:

Probably the 4th/5th time
trading with this website, but upon receiving the trade offer, the initial one was immediately cancelled and a new trade where i receive nothing was then accepted, 1.2k worth of skins gone, and yet a secure website and all my security procedures just effortlessly bypassed. “strong password”, 2fa and steam guard. How can this even just happen

You prob logged into a fake site of tradeit or elsewhere.

[ハリソン]

Originally posted by sneape:

Originally posted by Eren:

Probably the 4th/5th time
trading with this website, but upon receiving the trade offer, the initial one was immediately cancelled and a new trade where i receive nothing was then accepted, 1.2k worth of skins gone, and yet a secure website and all my security procedures just effortlessly bypassed. “strong password”, 2fa and steam guard. How can this even just happen

You prob logged into a fake site of tradeit or elsewhere.

Nah it was the same website i have already used, apparently a device from russia had my account, just hard to understand how it bypass everything as I have steam guard on my phone that requires confirmation to log in

[☁アンナとルカス☁]

Originally posted by Eren:

Originally posted by sneape:

You prob logged into a fake site of tradeit or elsewhere.

Nah it was the same website i have already used, apparently a device from russia had my account, just hard to understand how it bypass everything as I have steam guard on my phone that requires confirmation to log in

They hijacked your Session ID they dont need your 2FA for that.

Or

You logged into some fake Website and gave them your credentials. And stop saying no. Otherwise that wouldn't happend.

[RosK1nG]

You got API scammed, I´d suggest you to change your API key asap.

[Mulyono]

your fault

[Samuelhackson]

Go to your devices and check if there is someone on your profile u did not approve, if there is u did log into a fishing link. what u have to do is clear your divices first. then change your password. there is a security breech in steam guard where bots will use your approval to instant log into your account with the same approval u just gave. and redirect your trade if nothing else is included to their own bot profile.

[Larry Bird G.O.A.T]

Originally posted by akiuara:

Why would you use a third party site for buying skins? steam recommends to use steam market cuz it is the only market that provides 100% safety when buying items plus it is your responsibility to secure your own account, steam support can't help you with your concern.

lol

[golden ⁧⁧ snub nosed monki]

used tradeitgg several times, sorry this happened to you. can you check that the bot that took you items is actually tradeitgg’s bot?

[golden ⁧⁧ snub nosed monki]

Originally posted by akiuara:

Why would you use a third party site for buying skins? steam recommends to use steam market cuz it is the only market that provides 100% safety when buying items plus it is your responsibility to secure your own account, steam support can't help you with your concern.

100%? Not so sure about that, do you have any proof?

[Sabers]

Pay attention to what sites you use. Theres plenty of fake sites. Maybe let steam support know? And i noticed while reading comments that others told you to change your api key.

[Джонни Додепп]

I think I actually faced with smth similar recently, tho I reacted fast and didnt lose any items. I think the way they bypass all security is based on `Log in with steam` which is used to log-in in tradeit.gg.
Basically they bypass tradeit.gg security and get steam api access by granted. Basically operating with tradeit api they access your account trade operations and who knows what else.
In case you see random guy knocking to your friend list and you recently loged in to tradeit.gg, its a sign your account is on target. Go to Security and close all active sessions. This saved my inventory from scam, even scamer itself was pissed off. (check this thread https://steamcommunity.com/discussions/forum/1/601899704908793417/)