My account has breached the terms of service?

[Kim Impossible]

On another account of mine my name has been changed to its steam ID and it has this written in the description:


ACCOUNT ALERT - Tue Sep 07 2021

This account has violated the Steam Terms of Service Agreement.

This account has been flagged by Steam Support for violations of the Terms of Service Agreement.
Purchasing, gifting, trading, buying and selling items on the Community Market, and cd-key activation will be disabled.

Account functionality will be limited. Ban are permanent, non-negotiable and cannot be removed by Steam support.


We allowed you to send value skins to a friend or a storage account within 24 hours.
More info on this topic is available here: Steam Terms of Service Agreement.

wtf is going on? this some sort of elaborate scam and how do i deal with this?

[Brian9824]

Your account is compromised from you giving away your credentials. The giant red flag is

"We allowed you to send value skins to a friend or a storage account within 24 hours."

[Crazy Tiger]

Yup, compromised.

Secure your account, do these steps NOW:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Account security is the responsibility of the account holder. Read up on phishing so this doesn't happen again.

[Bee🐝]

Do NOT trade until your account is secured.

[Kim Impossible]

Originally posted by brian9824:

Your account is compromised from you giving away your credentials. The giant red flag is

"We allowed you to send value skins to a friend or a storage account within 24 hours."

Originally posted by Crazy Tiger:

Yup, compromised.

Secure your account, do these steps NOW:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Account security is the responsibility of the account holder. Read up on phishing so this doesn't happen again.

These sorts of situations keep happening to me despite having done these all before. Are scamming methods becoming more bold? Because I don't give out credentials of any kind and i'm not sure how these people are getting on my account.

[Askindale]

these scams are a joke

[Zekiran]

Originally posted by Askindale:

these scams are a joke

And yet, they're neither funny nor are they uncommon in any way.

[Askindale]

Originally posted by Zekiran:

Originally posted by Askindale:

these scams are a joke

And yet, they're neither funny nor are they uncommon in any way.

agreed. But I think i've got control back now.

[Bee🐝]

Originally posted by Danger Dolan:

Originally posted by brian9824:

Your account is compromised from you giving away your credentials. The giant red flag is

"We allowed you to send value skins to a friend or a storage account within 24 hours."

Originally posted by Crazy Tiger:

Yup, compromised.

Secure your account, do these steps NOW:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Account security is the responsibility of the account holder. Read up on phishing so this doesn't happen again.

These sorts of situations keep happening to me despite having done these all before. Are scamming methods becoming more bold? Because I don't give out credentials of any kind and i'm not sure how these people are getting on my account.

You have a lot of hours in CSGO. Are you using ANY third party sites for trading/competitions/light gambling? That's how they're getting into your account - those sites are "stealing" your info.

Please note, whatever "totally legit" and "totally safe" site you might be using - they clearly aren't above board. Also, Youtubers and Influencers are paid to advertise sites they know are dodgy and will eventually steal your account.

An easy way to keep your account safe is to just use the Steam marketplace.

[Askindale]

Originally posted by Bee:

Originally posted by Danger Dolan:

These sorts of situations keep happening to me despite having done these all before. Are scamming methods becoming more bold? Because I don't give out credentials of any kind and i'm not sure how these people are getting on my account.

You have a lot of hours in CSGO. Are you using ANY third party sites for trading/competitions/light gambling? That's how they're getting into your account - those sites are "stealing" your info.

Please note, whatever "totally legit" and "totally safe" site you might be using - they clearly aren't above board. Also, Youtubers and Influencers are paid to advertise sites they know are dodgy and will eventually steal your account.

An easy way to keep your account safe is to just use the Steam marketplace.

haven't used one in several years and i've revoked my API keys and done everything that was suggested several times in the past before this event. I don't know how they are still getting on. I get a lot of scam bots who hijack me from my friends list its ridiculous.

[Quint the Alligator Snapper]

Originally posted by Danger Dolan:

These sorts of situations keep happening to me despite having done these all before. Are scamming methods becoming more bold? Because I don't give out credentials of any kind and i'm not sure how these people are getting on my account.

Chances are that you're logging into some site that pretends to use "sign in through Steam" but is actually a phishing site (or it might even be a bug I've heard of on mobile chat that might automatically pass your login info to a phishing site).

It's a common phishing method to make a site that pretends to give you a "sign in through Steam" page which is actually a phishing page. It may even appear within a frame designed to pretend to be a browser window (even though it's actually just a frame inside another webpage).

Be very careful about logging into Steam, particularly "sign in through Steam" pages, as well as any links people send you in chat.

This is rather arcane but you should know the following:

1. "Sign in through Steam" should be a one-click pass-through page if you've already got an active login. For this reason (plus others), I strongly recommend people use Steam on their own external browser, or at least keep an active Steam login on their external browser, rather than just relying on the Steam client's built-in browser.

2. A real "Sign in through Steam" page does not open in a new window (or at least I've never seen it do so). A fake one, however, might generate a fake browser window that plays an animation to look like it's navigated to such a page. Of course, if you see a new browser window open, you can also try moving it around and see if it goes outside the borders of your actual browser window, too.

3. Customize how your browser looks. Or use an unusual browser, or modify your browser's useragent. This is because the site can't tell what color(s) you've set your Windows interface and/or your browser's interface to use. If you use something unusual, you're more likely to be able to spot the difference when a site gives you a nasty surprise.

Really, we shouldn't need to have to know these weird quirks of Sign in through Steam just to keep our account secure, but we do. Such is the price of using Steam I guess...

[Shotgun]

Originally posted by Danger Dolan:

These sorts of situations keep happening to me despite having done these all before. Are scamming methods becoming more bold? Because I don't give out credentials of any kind and i'm not sure how these people are getting on my account.

Either you're still getting caught by some "legit" site as mentioned by other posters above (you really need to learn how to inspect browser elements to determine if a web page is legit or has an overlay of some sort), or a less likely but still possible issue is that your computer has been compromised with a key-logger or rootkit of some sort, and it doesn't matter how many times you change your passwords for your Steam account or e-mail account or whatever, because the malicious party will always be able to extract the information from what you type on the compromised machine.

[Askindale]

Originally posted by Shotgun:

Originally posted by Danger Dolan:

These sorts of situations keep happening to me despite having done these all before. Are scamming methods becoming more bold? Because I don't give out credentials of any kind and i'm not sure how these people are getting on my account.

Either you're still getting caught by some "legit" site as mentioned by other posters above (you really need to learn how to inspect browser elements to determine if a web page is legit or has an overlay of some sort), or a less likely but still possible issue is that your computer has been compromised with a key-logger or rootkit of some sort, and it doesn't matter how many times you change your passwords for your Steam account or e-mail account or whatever, because the malicious party will always be able to extract the information from what you type on the compromised machine.

several virus scans i've done find no rootkits or other viruses. As for keyloggers i wouldn't be too sure how to know if i have one but i doubt I have one. I haven't used a third party website in years so that can't be it either.

[Moogal]

Originally posted by Zekiran:

Originally posted by Askindale:

these scams are a joke

And yet, they're neither funny nor are they uncommon in any way.

This is a bit funny though: "We allowed you to send value skins to a friend or a storage account within 24 hours."

[Bee🐝]

Originally posted by Moogal™:

Originally posted by Zekiran:

And yet, they're neither funny nor are they uncommon in any way.

This is a bit funny though: "We allowed you to send value skins to a friend or a storage account within 24 hours."

They'll "intercept" the trade. That's why there's such an emphasis on only "value" skins.

[Askindale]

Originally posted by Bee:

Originally posted by Moogal™:

This is a bit funny though: "We allowed you to send value skins to a friend or a storage account within 24 hours."

They'll "intercept" the trade. That's why there's such an emphasis on only "value" skins.

I swear 6 years olds write these things.