Help! Sus comment on my Steam profile: "I made a horrible mistake involving your account and this is very important. add me asap"

[🅼🅴🅾🆆≧◠ᴥ◠≦]

"I made a horrible mistake involving your account and this is very important. add me asap"

This is how the comment sounds like that I've received from a random level 5 Steam account on my profile. I'm guessing that is a first step for a phishing way to hack accounts.

Did anybody else recived it?
I've checked the users profile and it seems to be banned on Steam community.

Should I add the guy? He didn't sent any invitation and that's strange... Why would he tell me to add him...?

[ecznos]

Originally posted by ¿🆄🅽🅺🅽🅾🆆🅽?:

Should I add the guy? He didn't sent any invitation and that's strange... Why would he tell me to add him...?

So he can scam you of course. He will most likely tell you that he have reported you by accident. Then he wants you to contact a fake Valve employee.

[Komarimaru]

It's a scam, report them and the comment.

[( ( < < <🤖> > > ) )]

this is a scam... report the user and then block the user...

[breadman]

it's a known scam

[🅼🅴🅾🆆≧◠ᴥ◠≦]

Originally posted by ecznos:

Originally posted by ¿🆄🅽🅺🅽🅾🆆🅽?:

Should I add the guy? He didn't sent any invitation and that's strange... Why would he tell me to add him...?

So he can scam you of course. He will most likely tell you that he have reported you by accident. Then he wants you to contact a fake Valve employee.

I guess he has alt accounts and he somehow found out that I've made this topic I guess because he deleted his comment from my profile but still I reported him.

[reg1s7]

Just ignore him/her. The message is suspicious enough and match closely with a common scam method.

[( ( < < <🤖> > > ) )]

Originally posted by reg1s7:

Just ignore him/her. The message is suspicious enough and match closely with a common scam method.

no.... report.... its always best to report first.... then ignore...

[🅼🅴🅾🆆≧◠ᴥ◠≦]

I've reported the account and even if he deleted the comment from my profile it still exists in my notification area: https://prnt.sc/Rt82GKrS5sbi I'm glad that Steam thought at this

[( ( < < <🤖> > > ) )]

Originally posted by ¿🆄🅽🅺🅽🅾🆆🅽?:

I've reported the account and even if he deleted the comment from my profile it still exists in my notification area: https://prnt.sc/Rt82GKrS5sbi I'm glad that Steam thought at this

excellent...

steam can also look up what was posted by that account...

stay safe

[Ç!ｲ!乙3η-ﾒ]

What you need to be careful off is that this is not a two part scam, they may have already compromised your account and trying to make you set up a trade to a friend so they can intercept it....

Check your api key is blank....

Revoke/Delete the API key here: https://steamcommunity.com/dev/apikey (Domain name should be empty)

[🅼🅴🅾🆆≧◠ᴥ◠≦]

Originally posted by Ç!ｲ!乙3η-ﾒ:

What you need to be careful off is that this is not a two part scam, they may have already compromised your account and trying to make you set up a trade to a friend so they can intercept it....

Check your api key is blank....

Revoke/Delete the API key here: https://steamcommunity.com/dev/apikey (Domain name should be empty)

What you are telling me sounds interesting and it goes beyond my understanding unfortunately. Could you please rewrite?

1. I've checked my trades + trades history => nothing suspicious there.
2. I haven't recived any other messages or friends requests.
3. I'm not using trade bots or APIs and I don't have a domain website. Can you provide more details please?

Thanks for your comment

[Ç!ｲ!乙3η-ﾒ]

Sorry just saw your reply..

https://steamcommunity.com/dev/apikey (Domain name should be empty)

click the link above to be taken to your steam api page... If there is any text inside the box make sure to delete it


If there is any text in the domain field then this is a backdoor to your account....

They either use the send your items to a friend or send them to a fake admin to steal your items...

If they have access to your account when you try to trade with a friend they can change the trade to one of their accounts that they make to look like your friends account.

You then think you are trading to a trusted account but they steal your items instead...

[Fearagen]

Originally posted by ¿🆄🅽🅺🅽🅾🆆🅽?:

I've reported the account and even if he deleted the comment from my profile it still exists in my notification area: https://prnt.sc/Rt82GKrS5sbi I'm glad that Steam thought at this

Even if they deleted the comment, nothing really gets deleted from servers/databases due to fragmentation. Steam probably saw the comment once you reported their profile.

[🅼🅴🅾🆆≧◠ᴥ◠≦]

Originally posted by Fearagen:

Originally posted by ¿🆄🅽🅺🅽🅾🆆🅽?:

I've reported the account and even if he deleted the comment from my profile it still exists in my notification area: https://prnt.sc/Rt82GKrS5sbi I'm glad that Steam thought at this

Even if they deleted the comment, nothing really gets deleted from servers/databases due to fragmentation. Steam probably saw the comment once you reported their profile.

how do you know all this?

[Fearagen]

Originally posted by ¿🆄🅽🅺🅽🅾🆆🅽?:

Originally posted by Fearagen:

Even if they deleted the comment, nothing really gets deleted from servers/databases due to fragmentation. Steam probably saw the comment once you reported their profile.

how do you know all this?

Common knowledge, (At least in the tech/server world) if everything you deleted online actually got deleted (Kind of like tossing something inside the recycle bin and pressing "delete") sites would slow down as a lot of our sites infrastructure is still mostly powered by hard drives due to their cheap prices for big storage, especially petabyte drives, and so fragmentation would occur, and I could not imagine running a defrag on something as big as a ton of servers with potentially petabytes worth of storage, would take ages.