I fell for the csgo tournament scam

[Sini]

Hey, basically someone chatted with me about voting for their cs go team.

Then i noticed mails was saying my authentication was getting codes from a new device which freaked me out. I deauthorize all devices and changed passwords.

I been freaking out and thinking if it still unsafe and not sure what to do.

I know some some people call it simple scam though it still problem there are people who is falling for it and there should be more aware of this and what to do when falling for it.

[Judgmental Amaterasu]

The only people falling for it are people like you that ignore the NUMEROUS warnings provided by Steam and the thousands of other PSAs about it on here.

[Kesac]

Here's what you need to do...

DO NOT TRADE

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

[Your Mom's Oshi]

Unfortunately there is no stopping people from falling for this scam. I would check your message history just to be sure that you didn't send the link to other people. Probably didn't happen but it's worth checking.

[ShelLuser]

OP....

http://steamcommunity.com/dev/apikey

Does this list any entries or does it only ask for a domain name? If this page lists any contents then you're not safe yet.

Remove any API keys, THEN change your password and also de-auth other devices again (maybe do these two in the opposite sequence). It's the API key that gives people access to your account.

[nullable]

Well all scams are simple at their core. People just aren't always experienced with the particulars of how scams work and what to look for. So invariably when they're suddenly faced with that test the chance of failure is high.

I mean the person you were chatting with was either a foolish dupe, or someone on your friends list who themselves got their account hijacked and the hijacker was using your nominal trust of a "friend" to get by your defenses. It works, that's why scammers do it that way.

And it's not like scams are new. People have been falling for them as long as there's been civilization. No reason that should change in 2021.

[Fake]

Unless you are a professional CS:GO player, CS:GO isn't a means of making money.

Don't treat it as a stock market because it doesn't offer the protection of one. Steam can also trade ban you if you do shady things. Or if you cheat, the VAC hammer will land and all of your skins will be locked to your account.

[Sini]

Originally posted by Kesac:

Here's what you need to do...

DO NOT TRADE

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

Thanks, i already had Malwarebytes installed but didn't find any viruses.

[Sini]

Originally posted by ShelLuser:

OP....

http://steamcommunity.com/dev/apikey

Does this list any entries or does it only ask for a domain name? If this page lists any contents then you're not safe yet.

Remove any API keys, THEN change your password and also de-auth other devices again (maybe do these two in the opposite sequence). It's the API key that gives people access to your account.

Did that thanks. Hopefully this solve this issue,

[Sini]

He tried to take away all my TF2 stuff but i cancelled the trade offer and reported the account.