trade got automatically cancelled by itself. even though i already accepted the trade.

[Blanc]

whats going on? how long has this been going on?

[ShelLuser]

Check this link:

https://steamcommunity.com/dev/apikey

Does it mention anything other than ask for a domain name? If so then your account got taken over and some bot is now controlling your trades.

[reg1s7]

It looks like your account is compromised.
Please change password, deauthorize all devices, and revoke API keys.

[ShelLuser]

I'd be very careful here, an API key is usually a sign that your account got taken over, just removing it won't cut it.

Also de-auth all other devices (see profile security settings), change your Steam password and scan your computer for any possible malware.

[Ettanin]

Websites that rely on API Keys with write access to perform functions are inherently insecure

[drael]

:)

[Brian9824]

Originally posted by ♫ Yanson Dreemurr ♫:

Originally posted by ShelLuser:

I'd be very careful here, an API key is usually a sign that your account got taken over, just removing it won't cut it.

Also de-auth all other devices (see profile security settings), change your Steam password and scan your computer for any possible malware.

Ive asked this issue through tf2 discussion. They are also having same problem with api key. It maybe possible glitch to trade bot itself. Scrap.tf is a big trading website. Imo Its pretty impossible for hacker to hack that website tho.

Your opinion would be EXTREMELY wrong. Using sites like that open you up to far more risk as ANY site can be hacked and your giving that site backdoor access into your account.

[Brian9824]

Originally posted by ♫ Yanson Dreemurr ♫:

Originally posted by brian9824:

Your opinion would be EXTREMELY wrong. Using sites like that open you up to far more risk as ANY site can be hacked and your giving that site backdoor access into your account.

i dont really care about that anymore. im just assuming thats just kind of glitch or bug. ive been using scrap.tf for years. and thats a biggest trading website in tf2 history.

since you arent tf2 player. you dont know much about scrap.tf so thats fine i understand it.

I have a background in IT, have taken classes in IT security, etc. You have no clue the amount of damage and destruction that can be done and the number of scams you can fall victim to by allowing them to set up an API key connected to the backend of steam.

Again, not saying they aren't legit, but your incredibly naive if you think they can't get hacked. ANY site can get hacked.

In the past Steam, Amazon, Sony, Microsoft, etc have all been hacked and all are far bigger and have more security then Scrap.tf.

So saying it's impossible for a hacker to hack them is delusional.

[reg1s7]

Sorry, but your account could still be in danger even if scrap.tf is legit.
You do not know where the hijacker actually come from. It could be from another site that you visit months ago.

Please change your password and deauthorize all devices.

[Muppet among Puppets]

To set up an api key someone has access to your account.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey