Someone stole one of my Steam games

[SickBeast]

Hi Everyone,

I got an email notification today saying that one of my Steam games had been gifted to someone that I don't even know. Do any of you know how this is possible? I changed my Steam password just now out of precaution. Can or will Steam give me back my game key? I'm kind of disturbed that this type of thing is even possible.

Any insight would be great. Thanks!

[Aluvard]

Your account was hijacked. Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Regarding items:
https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

[Bibo1]

Did you read it right?
A game that is activated on your account can't be given away.
Did you have wallet funds or was there a still an old Steam gift in your inventory.
Whatever the case, someone has or had access to your account.
Follow these steps:
Steam account recovery guide
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

[SickBeast]

Thanks, Aluvard and Bibo1! I just did all of that. It just makes me wonder how on earth someone could have done this. Also, seeing as I know the Steam user name of the person that my game was fraudulently "gifted" to, I am quite surprised and disappointed that Steam will do nothing to help resolve this beyond telling me to change my password.

[Bibo1]

You gave away your login info somewhere.
A 3rd party trading site, an invitation to a vote or something else where you logged in thinking it was a proper Steam Login box.
Also, Steam doesn't know if someone legitimately gifted (or sold for rl money or something else) another person a game/gift and now just wants to get it back out of spite or to scam the other.
A transaction from your account (whihc is your responsibility) took place and there's no way for Steam to act in case they break the law themselves.

[Spawn of Totoro]

Origineel geplaatst door SickBeast:

Thanks, Aluvard and Bibo1! I just did all of that. It just makes me wonder how on earth someone could have done this. Also, seeing as I know the Steam user name of the person that my game was fraudulently "gifted" to, I am quite surprised and disappointed that Steam will do nothing to help resolve this beyond telling me to change my password.

Nothing they can really do.

If the game was attatched to your account, then it can't be "gifted" or transferred. Honestly, it sounds like you got a phishing e-mail.

If you are missing a game, go to: Help > Steam Support

Then search for the game. Click on it, then "This game is not in my library."

Someone likely hid the game on your profile or "Permanently Removed" as it is also known as.

[SickBeast]

The thing is, Steam has 2FA. Someone would have had to have access to my email also in order to steal this game from me. 😳

[Spawn of Totoro]

Origineel geplaatst door SickBeast:

The thing is, Steam has 2FA. Someone would have had to have access to my email also in order to steal this game from me. 😳

Was the game on your account? If so, it can't be stolen as it can't be transferred.

Yes, they would have had to have access to your account to hide a game. So far, all cases of such breaches have been users entering their information into a phishing site. Valve can't stop people from falling for a phishing scam.

I suggest changing your e-mail password and checking for viruses as well.

[lsdninja]

Origineel geplaatst door SickBeast:

The thing is, Steam has 2FA. Someone would have had to have access to my email also in order to steal this game from me. 😳

Use the mobile authenticator in the app, even if you just let it generate Steam Guard codes for you. Email and SMS are the least secure ways of sending 2FA codes. More stuff needs to support locally generated 2FA codes.

[Bibo1]

Could it be that the e-mail (supposedly from Steam) is actually the scam mail?
Hopefully you did not click on any links.
Have you actually checked if your "game" is in your account on the Steam Client?
Like stated above, an activated game cannot be gifted i.e transfered to another account.