Steam Wallet got Stolen

[Just_John]

On march 10 I got spammed emailed by Steam. I clicked on one of the Emails to find out Everything is in simplified Chinese. But I saw that I was getting Charged 3 cents to 1 cent on my Steam wallet. So I log into my account to find out all of my money in my Steam wallet was stolen and all of my badges got sold in the market thing for a cent and it shows that there has been tons of transactions of buying dota skin something like that I didn’t even know that was a game until today. I contacted steam and they responded basically saying it is all my fault they can’t do anything about it goodbye. And proceeded to tell me my computer probably had a virus before closing the ticket. Keep in fact that When I first got my account I immediately set up Steam guard wich is steams way of 2 factor authentication. On top of that I made a complex password like I do with every account that I own. I never had downloadded or clicked on anything malicious even if I attempted to I have tons of protection that whould block it. So I am out of options I am upset and disappointed and curious to know how it was possible to begin with. I ran out of options and at this point I wanted to ask the community if I am the only one that has dealt with this and if so if there is literally any thing to do.

[Wolf Knight]

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

you are responsible for the security of your account, figure out how you gave away the log in.

[Crazy Tiger]

Compromised account. Happens often enough looking at threads posted weekly.

Phishing is the most likely cause, OP. When people get phished, they give out the account name, password and then active guard code. A bot quickly enters it and hijackers have access then. Ultimately 2FA is "just another code" that can be given away when getting phished. It's not a magical defense layer.

Secure your account:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Wallet money won't be returned, market transactions are final. I assume you mean trading cards, as badges cannot be sold.

[Just_John]

Originally posted by Wolf Knight:

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

you are responsible for the security of your account, figure out how you gave away the log in.

Thx for your fast reply. I didn’t make 2 threads i was having connection issues so the first time i tried it gave a error page so maybe it glitched through idk.

Anyways, this is where i am confused i never had signed in to my steam account other than the app that I do for years O never clicked or downloaded anything suspicious. And steam told me it was acsesed through steam guard?! How is it posible to do that isn’t the only thing that has acses to steam guard my phone? I also ofcourse deothorized all devices changed paswords and got new backup codes and everything.

[Just_John]

Originally posted by Crazy Tiger:

Compromised account. Happens often enough looking at threads posted weekly.

Phishing is the most likely cause, OP. When people get phished, they give out the account name, password and then active guard code. A bot quickly enters it and hijackers have access then. Ultimately 2FA is "just another code" that can be given away when getting phished. It's not a magical defense layer.

Secure your account:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Wallet money won't be returned, market transactions are final. I assume you mean trading cards, as badges cannot be sold.

Yeh trading cards I think that’s what they are called. I am really upset man. I can’t believe they wont even do anything about it, I mean they replied to me like they could care less

[KalGimpa]

Originally posted by Just_John:

Originally posted by Crazy Tiger:

Compromised account. Happens often enough looking at threads posted weekly.

Phishing is the most likely cause, OP. When people get phished, they give out the account name, password and then active guard code. A bot quickly enters it and hijackers have access then. Ultimately 2FA is "just another code" that can be given away when getting phished. It's not a magical defense layer.

Secure your account:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Wallet money won't be returned, market transactions are final. I assume you mean trading cards, as badges cannot be sold.

Yeh trading cards I think that’s what they are called. I am really upset man. I can’t believe they wont even do anything about it, I mean they replied to me like they could care less

i am sorry this happened, partner, but it is not that they do not care

they used to replace the items that were scammed, but they got scammed themselves so much that they stopped

we have to keep our accounts secure and the thing to remember is

nobody capable of hacking steam is going to waste it messing with your account

they will get in, scrape the site of all the truly useful, money making info and leave as quietly as they can and sell it

what happened to you was more than likely phishing.

somewhere along the lines people either

log into one of these sites that offer free stuff or trading

log into a page thinking it is a steam page, usually by clicking a link from a shady source

they gave their info to someone they thought was steam because of a scam

it is that or you had/have some kind of virus on your system. this is much less likely as phishing is the number one way that people are stealing accounts these days

[Just_John]

Originally posted by KalCuey:

Originally posted by Just_John:

Yeh trading cards I think that’s what they are called. I am really upset man. I can’t believe they wont even do anything about it, I mean they replied to me like they could care less

i am sorry this happened, partner, but it is not that they do not care

they used to replace the items that were scammed, but they got scammed themselves so much that they stopped

we have to keep our accounts secure and the thing to remember is

nobody capable of hacking steam is going to waste it messing with your account

they will get in, scrape the site of all the truly useful, money making info and leave as quietly as they can and sell it

what happened to you was more than likely phishing.

somewhere along the lines people either

log into one of these sites that offer free stuff or trading

log into a page thinking it is a steam page, usually by clicking a link from a shady source

they gave their info to someone they thought was steam because of a scam

it is that or you had/have some kind of virus on your system. this is much less likely as phishing is the number one way that people are stealing accounts these days

I am trying my best to understand but i am just super confused If steam got scammed themself why not ask for proof I literally have all the proof there is possible to get i have emails they even can probably see who loged in from where and when. And i am so confident that I didn’t click or downloaded anything man. I got malwarebytes to check my pc it came back nothing i ran a full scan on windows defender came back nothing i ran avast came back nothing so is it like posible to have a virus that will defeat 3 virus protection services should I just factory reset my system. I am literally left in the dust not only i lost all my money and my trading cards or whatever they are called now i literally got ptsd from this I am so paranoid right now and honestly I am just disappointed.

[J4MESOX4D]

Have you entered your Steam credentials into any 3rd party logins? It's either that or you have tailored malware on your PC.

[Just_John]

Originally posted by J4MESOX4D:

Have you entered your Steam credentials into any 3rd party logins? It's either that or you have tailored malware on your PC.

No I haven’t and 3 AV softwares said my pc was clean

[Crazy Tiger]

Phishing sites mimic Steam logins, not just on 3rd party trading/gambling sites, but also on esports sites. They even mimic the standard Steam pages. Don't say too quickly that you haven't logged in on a phishing site, it happens to the best of us. The point of a good phishing site is that you don't realise you used one.

It's good if you can find out what happened, but ultimately it only matters for yourself. You don't have to convince anyone here.

People being people is why market transactions are final and nothing gets returned. There is no point in asking for "proof" for Valve, as any delivered "proof" by users can easily be faked. They simply got tired of the people abusing the policies so that they decided to go the hard line.

It requires active input of the account holder to get an account compromised, so the responsibility for that lies with the account holder. You have to hand over the keys to the account to the hijacker. Sure, it may suck if you're a victim, but ultimately that doesn't matter much.

As said, people being people is why we can't have nice things.

[Muppet among Puppets]

Originally posted by Just_John:

When I first got my account I immediately set up Steam guard wich is steams way of 2 factor authentication. On top of that I made a complex password like I do with every account that I own.

How did you get the account?

[Just_John]

Originally posted by Crazy Tiger:

Phishing sites mimic Steam logins, not just on 3rd party trading/gambling sites, but also on esports sites. They even mimic the standard Steam pages. Don't say too quickly that you haven't logged in on a phishing site, it happens to the best of us. The point of a good phishing site is that you don't realise you used one.

It's good if you can find out what happened, but ultimately it only matters for yourself. You don't have to convince anyone here.

People being people is why market transactions are final and nothing gets returned. There is no point in asking for "proof" for Valve, as any delivered "proof" by users can easily be faked. They simply got tired of the people abusing the policies so that they decided to go the hard line.

It requires active input of the account holder to get an account compromised, so the responsibility for that lies with the account holder. You have to hand over the keys to the account to the hijacker. Sure, it may suck if you're a victim, but ultimately that doesn't matter much.

As said, people being people is why we can't have nice things.

Yeh I guess so It’s gone forever and I can’t do anything about it by the looks of it. Also I never signed into steam on a web page in the first place. But its whatever steam said what they had to stay so It is really disappointing and now it just msde me paranoid. Thanks for youre help

[Just_John]

Originally posted by Muppet among Puppets:

Originally posted by Just_John:

When I first got my account I immediately set up Steam guard wich is steams way of 2 factor authentication. On top of that I made a complex password like I do with every account that I own.

How did you get the account?

By saying get the acount I ment like when i signed up

[Muppet among Puppets]

Originally posted by Just_John:

Originally posted by Muppet among Puppets:

How did you get the account?

By saying get the acount I ment like when i signed up

Then in some way you must have leaked the 3 details, or a device did.
Thats the only way all 3 meet to get "used by a scammer"

[Bubble Tea Bunny]

Oh dear, peko! That's a frustrating situation to be in, peko! It sounds like you took all the necessary precautions to secure your Steam account, peko. Setting up Steam guard and creating a complex password are both important steps to take in protecting your account, peko. It's disappointing that even with those measures in place, your wallet and badges were still stolen, peko.

It's possible that your computer was compromised with a virus or malware, peko. It's important to regularly scan your computer for viruses and keep your antivirus software up to date, peko. Additionally, be cautious of phishing emails that may attempt to trick you into clicking on a malicious link or giving away your account information, peko.

As for what to do next, peko, it's always worth reaching out to the Steam community for help and support, peko. You're definitely not alone in dealing with account theft, peko. Other users may have experienced similar situations and can offer advice on what steps to take next, peko. It's also possible that Steam support may be able to assist you further if you provide additional information or evidence of the theft, peko.

Overall, peko, it's important to remain vigilant in protecting your online accounts and staying informed about potential security threats, peko. Stay safe out there, peko!

[Just_John]

Originally posted by Muppet among Puppets:

Originally posted by Just_John:

By saying get the acount I ment like when i signed up

Then in some way you must have leaked the 3 details, or a device did.
Thats the only way all 3 meet to get "used by a scammer"

I honestly have no idea at this point