Buddy's account keeps getting items sold by someone/something.

[RubberFaux]

Just Like the title, my buddy's account keeps losing items and they're being put up for sale. I've told him about changing passwords, double authenticator, and checking where his account has been breached, but he hasn't gotten to me yet. I'll keep this discussion updated as he gets to me.

[my new friend]

Tell your buddy to follow all the steps.

Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your password on a secure device.
Generate new back up codes. https://store.steampowered.com/twofactor/manage
Revoke the api key https://steamcommunity.com/dev/apikey

And stop giving away his account information.

[crunchyfrog]

Well, I see a massive problem here - HOW are you trying to contact him?

If you're trying through his account, then all you're likely doing is talking to the scammer that has control of his account now, so no wonder he ain't responding.

If however, you mean you have other form of contact, perhaps try pushing a more serious message to him telling him that he's losing stuff by the minute.

All you can do is tell him as you've done - to fix his account and revoke API keys and so on.

[RubberFaux]

I talk to him over Discord, and it happens in waves. Today was the most recent but it's been going on for months

[Wolf Knight]

it would be best for your friend to post since its their account that is having trouble.

does your friend use 3rd party sites? does he advertise them with the profile name/avatar? all 3rd party sites are USE AT OWN RISK

[crunchyfrog]

Originally posted by RubberFaux:

I talk to him over Discord, and it happens in waves. Today was the most recent but it's been going on for months

Well you need to impress on him that he needs to get on top of it.

Imagine how pissed he would be if he say, got a load of borthday money and the scammer just spent it all and pissed off with the proceeds?

He can NEVER get that stuff back. SO tell him to follow the steps to clear it up because he clealy hasn't done it proplerly. Send him here if need be.

[Pumpkin Jack]

Originally posted by crunchyfrog:

Originally posted by RubberFaux:

I talk to him over Discord, and it happens in waves. Today was the most recent but it's been going on for months

Well you need to impress on him that he needs to get on top of it.

Imagine how pissed he would be if he say, got a load of borthday money and the scammer just spent it all and pissed off with the proceeds?

He can NEVER get that stuff back. SO tell him to follow the steps to clear it up because he clealy hasn't done it proplerly. Send him here if need be.

Hey, I'm that friend this post is talking about. Trust me, I've done everything I can. I use bitdefender to block and warn me about bad websites, I have steam guard active, I changed my email password then my steam password to something complex, my api key was removed, and I put a steam pin number as well over a month ago. I haven't touched anything unusual since.

[crunchyfrog]

Originally posted by Bloody:

Originally posted by crunchyfrog:

Well you need to impress on him that he needs to get on top of it.

Imagine how pissed he would be if he say, got a load of borthday money and the scammer just spent it all and pissed off with the proceeds?

He can NEVER get that stuff back. SO tell him to follow the steps to clear it up because he clealy hasn't done it proplerly. Send him here if need be.

Hey, I'm that friend this post is talking about. Trust me, I've done everything I can. I use bitdefender to block and warn me about bad websites, I have steam guard active, I changed my email password then my steam password to something complex, my api key was removed, and I put a steam pin number as well over a month ago. I haven't touched anything unusual since.

Well the thing is, you clearly haven;t as it would work.


The fact someone still has access demonstrates that you've either missed something or done something wrong.

So you need to follow the steps people have given and do them EXACTLY and in order.

A simple trip up like changing your passwords BEFORE doing the last cleanup step simply gives the scammer your new details.

So your best bet is to go right from the beginning, assume you've been newly phished, and go through EVERYTHING anew, step by step and slowly.