Someone used my account and money to buy them a game

[bread]

I needed somewhere to post this, I have full steam guard on my account, with full contact credentials, and had a complex password (I changed it) though someone SOMEHOW got access to my account, and used it to gift them Dying Light 2. Now steam won't let me refund it because they played it for more than 2 hours, and they got away with stealing 63 dollars from me. Steam really needs to get better at supporting their players. I have had steam for 4 years and NEVER has this ever happened to me!

[bread]

If anyone has an idea to get steam to listen to me, PLEASE tell me!

[davidb11]

Whoa. THat's wild.
Usually when people phish a person's account, they don't make that account give other accounts random games.

I'm also not sure how Steam Support wouldn't help you in this situation since you didn't make the purchase.

[Crazy Tiger]

Either you got phished or you have a keylogger somewhere on your PC. Either way, the hijackers got your login credentials (login name, password and then active guard code). do keep in mind that Steam guard or complex passwords aren't magical shields and failry useless when it comes to both phishing or keyloggers. Phishing is the most likely, though.

Start with securing your account::
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Account security is the responsibility of the account holder. Read up on phishing so this doesn't happen again.

You can try a manual ticket. Find the purchase, choose the "I have a question about this purchase" option and explain politely. Do keep in mind that they can still say "no".

[bread]

Originally posted by davidb11:

Whoa. THat's wild.
Usually when people phish a person's account, they don't make that account give other accounts random games.

I'm also not sure how Steam Support wouldn't help you in this situation since you didn't make the purchase.

and this has been happening to other players for YEARS now, you would think steam would get better at making sure it doesn't happen, they can't even blame me for this because I DIDN'T EVEN GET AN EMAIL notifying me about the purchase! I had to find out about it through my card's transaction history. Like I said, I had steam guard on my account fully locked and secure, there was no reason for this to happen!

[davidb11]

Er. You got phished.
This is something that Steam literally can't stop, because people fall victim to scams all the time.
You want Steam to stop this, you need to completely eliminate human behavior for the most part.

[bread]

Originally posted by Crazy Tiger:

Either you got phished or you have a keylogger somewhere on your PC. Either way, the hijackers got your login credentials (login name, password and then active guard code). do keep in mind that Steam guard or complex passwords aren't magical shields and failry useless when it comes to both phishing or keyloggers. Phishing is the most likely, though.

Start with securing your account::
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Account security is the responsibility of the account holder. Read up on phishing so this doesn't happen again.

You can try a manual ticket. Find the purchase, choose the "I have a question about this purchase" option and explain politely. Do keep in mind that they can still say "no".

someone made an attempt at "phishing" my account but I caught on before they could really get anything out of it. And I am currently checking for a keylogger, but thanks for the info!

[DC-GS]

Originally posted by Jinx:

I DIDN'T EVEN GET AN EMAIL notifying me about the purchase!

check if your account is still bound to your email.
If yes, someone has access to your mails.

[Satoru]

Originally posted by davidb11:

Whoa. THat's wild.
Usually when people phish a person's account, they don't make that account give other accounts random games.

I'm also not sure how Steam Support wouldn't help you in this situation since you didn't make the purchase.

Normally this isnt done because the transactions are easily reversed and as such scammers barely bother doing it.

[bread]

Originally posted by DC-GS:

Originally posted by Jinx:

I DIDN'T EVEN GET AN EMAIL notifying me about the purchase!

check if your account is still bound to your email.
If yes, someone has access to your mails.

will do! Thank you!

[Satoru]

Originally posted by Jinx:

If anyone has an idea to get steam to listen to me, PLEASE tell me!

https://help.steampowered.com/en/

Contact support

No one here can assist you

[Aachen]

Please don’t name-and-shame.

[bread]

Originally posted by Aachen:

Please don’t name-and-shame. :largegoo::greenslime:

yeah, you're right, I edited it.

[76561199031784585]

Same here, look at my name it was changed in Chinese 🤣🤣

[76561199031784585]

I didn't really expected this to happen. Some of the games I played was gone. And a free to play game was added. Maybe I'll just delete my steam account then.

[Bee🐝]

Originally posted by 能豆儿:

I didn't really expected this to happen. Some of the games I played was gone. And a free to play game was added. Maybe I'll just delete my steam account then.

Those games aren't gone, they've just been "removed". Find the game and just restore it using the Support feature. Games are permanently bound to an account and can only be removed through a refund or revoked by Steam itself. Hijackers can't remove games.


Also, you must also take the following steps to secure your account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey - This field should be blank

Do NOT trade until your account is secured.

Steam does not return inventory items or wallet funds: https://support.steampowered.com/kb_article.php?ref=3415-WAFH-6433#noreturn


Oh and don't necro old threads.