Steam trade glitch

[itsStrilly]

So I recently tried to trade my brother a csgo skin through my phone on the mobile application and when I went to do the additional confirmation it said error try again later and so I tried a couple more times when finally the confirmation didn't show up and so I checked my trade history and it said the trade was accepted right away which was odd because my brother wasn't at his computer at the time of the trade. I asked him if he had gotten the trade but he said no, I asked if I could go on his computer to check and when I did I noticed he had not gotten the trade offer and the skin wasn't in his inventory. I went back to my computer to check and I didn't have the skin either. I wouldn't make so much of a fuss out of this if it was something like a p250 battle scarred but it was a $150 skin and I really don"t want to lose my money.

[Zekiran]

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey
** If there is nothing in the API key area, that’s fine. If there IS something, remove it. Nothing should be there.**

No items that have been traded away during this time will be returned to you.

Change your Email’s password on your computer for safety


Your accounts are compromised. Both of you need to do this.

[itsStrilly]

I'm pretty sure my account is not compromised

[Zekiran]

Originally posted by itsStrilly:

I'm pretty sure my account is not compromised

Your account or his IS compromised.

That is the ONLY way that this ever happens. To be SURE, it's one of your accounts. To be SAFE, do that on BOTH.

That 'trade' group you're in?

You have clearly used it, and that is likely how your - or your brother's information has been compromised.

There is no other way that this happens. Period. None.

[itsStrilly]

Originally posted by Zekiran:

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey
** If there is nothing in the API key area, that’s fine. If there IS something, remove it. Nothing should be there.**

No items that have been traded away during this time will be returned to you.

Change your Email’s password on your computer for safety


Your accounts are compromised. Both of you need to do this.

I don't know how my account would be compromised I have not signed in on anything besides steam

[itsStrilly]

Originally posted by Zekiran:

Originally posted by itsStrilly:

I'm pretty sure my account is not compromised

Your account or his IS compromised.

That is the ONLY way that this ever happens. To be SURE, it's one of your accounts. To be SAFE, do that on BOTH.

That 'trade' group you're in?

You have clearly used it, and that is likely how your - or your brother's information has been compromised.

There is no other way that this happens. Period. None.

I have not used that steam group I joined it a bit ago but I sold most of my skins on the market so I could buy games so I never ended up using it

[Bee🐝]

Your accounts could be compromised. If it wasn't your account then it was your brother's, but you both still need to do those steps - better save than sorry. It's a few steps for total peace of mind.

[Zekiran]

Again, it doesn't matter whether it's one or both of the accounts. For your account's SECURITY and SAFETY, you should both DO those things rather than trying to foist responsibility off on 'some nebulous thing out there'.

The only reason that the trade went somewhere it shouldn't have, is BECAUSE one or both of the accounts are COMPROMISED.

That's the only reason. So FIX that security issue and be careful, both of you, where you put your information.

[reg1s7]

I have not heard about trade accepted from "error try again later", but it is likely that your account is compromised.
In your trade offer history, do you see a trade offer being rejected recently?

[itsStrilly]

Originally posted by es3826:

I have not heard about trade accepted from "error try again later", but it is likely that your account is compromised.
In your trade offer history, do you see a trade offer being rejected recently?

I just checked trade history and it now says that the skin was traded to a bot, instead of yesterday when it said it was traded to my brother. Thanks you guys for the help.

[itsStrilly]

Originally posted by Zekiran:

Again, it doesn't matter whether it's one or both of the accounts. For your account's SECURITY and SAFETY, you should both DO those things rather than trying to foist responsibility off on 'some nebulous thing out there'.

The only reason that the trade went somewhere it shouldn't have, is BECAUSE one or both of the accounts are COMPROMISED.

That's the only reason. So FIX that security issue and be careful, both of you, where you put your information.

how went to revoke the API key but i have to put in a new domain name. what do I put for that?

[wuddih]

Originally posted by itsStrilly:

Originally posted by Zekiran:

Again, it doesn't matter whether it's one or both of the accounts. For your account's SECURITY and SAFETY, you should both DO those things rather than trying to foist responsibility off on 'some nebulous thing out there'.

The only reason that the trade went somewhere it shouldn't have, is BECAUSE one or both of the accounts are COMPROMISED.

That's the only reason. So FIX that security issue and be careful, both of you, where you put your information.

how went to revoke the API key but i have to put in a new domain name. what do I put for that?

you press the revoke button. if there is none, then there is nothing to revoke and you keep your fiddlefingers to yourself.

again instructions.
Please do the following steps in order:

1. Scan for malware (with whatever)
   
2. Deauthorize all other devices
   
   • https://store.steampowered.com/twofactor/manage
3. Generate new backup codes
   
   • https://store.steampowered.com/twofactor/manage
4. Change your Steam account password, preferably from a known safe device.
   
5. Revoke API key
   
   • https://steamcommunity.com/dev/apikey

[itsStrilly]

Originally posted by wuddih:

Originally posted by itsStrilly:

how went to revoke the API key but i have to put in a new domain name. what do I put for that?

you press the revoke button. if there is none, then there is nothing to revoke and you keep your fiddlefingers to yourself.

again instructions.
Please do the following steps in order:

1. Scan for malware (with whatever)
   
2. Deauthorize all other devices
   
   • https://store.steampowered.com/twofactor/manage
3. Generate new backup codes
   
   • https://store.steampowered.com/twofactor/manage
4. Change your Steam account password, preferably from a known safe device.
   
5. Revoke API key
   
   • https://steamcommunity.com/dev/apikey

Done Thanks for the help. Is there any possible way that I could get the skin back or is it gone

[Insomnia]

It's gone , Valve don't return skins lost from scams.

[J4MESOX4D]

Originally posted by itsStrilly:

Originally posted by es3826:

I have not heard about trade accepted from "error try again later", but it is likely that your account is compromised.
In your trade offer history, do you see a trade offer being rejected recently?

I just checked trade history and it now says that the skin was traded to a bot, instead of yesterday when it said it was traded to my brother. Thanks you guys for the help.

It was never traded to your brother - it was an account impersonating your brother. Your initial intended trade failed and then the scammers submitted a bogus trade offer to their bot disguised as your brother and you accepted. Your account and the API key used to control trades was compromised.

If the bot contains a name of a site, at least you'll know which one is responsible.