Unauthorised Community Market Purchase
I just realised that my steam wallet was deducted and it seem that there was a purchase on Thu Jan 16 (01:37:36) 2025 via community market at that time I was still a sleep. How can I get my steam wallet back?
< >
Showing 1-13 of 13 comments
Do these ASAP:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Lost items or wallet funds will not be restored.

https://help.steampowered.com/en/faqs/view/3B6E-B322-2400-8D24

Check for any pending market trades, those you can still cancel -- after you've done the above steps. If you have no pending market trades, the wallet funds are gone for good.
Last edited by Chika Ogiue; Jan 16 @ 1:49am
D. Flame Jan 16 @ 2:03am 
You don't. People on here get hack all the time, lose everything, and Valve never does anything about it. They have a disclaimer that "you are responsible for your own account," so they never do anything to help after a hack.

Simply forcing every community transaction to trigger a steam guard prompt would go a long way in preventing these hacks, but Valve can't even be bothered to do that.

Basically, you are just out of luck. Sorry, but Valve just doesn't care. They get their cut whether the transactions were legitimate or not.
Originally posted by D. Flame:
You don't. People on here get hack all the time, lose everything, and Valve never does anything about it.

Accounts on Steam are PHISHED not hacked because the end user giving away all their account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code, or scanning the QR code or authorising via fingerprint giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link, signing in through a fake login window etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

The weakest link is the end user, not the security offered.
Originally posted by D. Flame:
Simply forcing every community transaction to trigger a steam guard prompt would go a long way in preventing these hacks, but Valve can't even be bothered to do that.

Valve used to require that. People complained. Valve changed it to address their complaints. I do agree that it should be an optional toggle, toggled ON by default, though.

Items, etc., used to be restored until people made false allegations of being scammed so they could get their items duplicated. Because Valve don't like having the market manipulated in this manner -- you can't have your cake and eat it -- items are no longer restored. Wallet funds are in essence also considered an item once added to your account and not as "real world" money. So that, too, isn't restored.
D. Flame Jan 16 @ 2:52am 
Originally posted by Nx Machina:
Originally posted by D. Flame:
You don't. People on here get hack all the time, lose everything, and Valve never does anything about it.

Accounts on Steam are PHISHED not hacked
There is actually proof of people being hacked, and even devs saying they themselves were hacked. I have shared the links many times, and even to you specifically.

You always ignore them, and go back to spamming the same lies in the very next thread.



Originally posted by Chika Ogiue:
Originally posted by D. Flame:
Simply forcing every community transaction to trigger a steam guard prompt would go a long way in preventing these hacks, but Valve can't even be bothered to do that.

Valve used to require that. People complained. Valve changed it to address their complaints. I do agree that it should be an optional toggle, toggled ON by default, though.

Items, etc., used to be restored until people made false allegations of being scammed so they could get their items duplicated. Because Valve don't like having the market manipulated in this manner -- you can't have your cake and eat it -- items are no longer restored. Wallet funds are in essence also considered an item once added to your account and not as "real world" money. So that, too, isn't restored.
I am not interested in excuses. Community transactions should required 2FA, full stop, period, do not pass go - do not collect $200.
Originally posted by D. Flame:
I am not interested in excuses. Community transactions should required 2FA, full stop, period, do not pass go - do not collect $200.

Valve used to do that. Many users overruled you and demanded Valve stop. Valve listened to the majority. If you wish to change it, you can also try taking legal action. Do keep us informed of your case.
D. Flame Jan 16 @ 3:06am 
Originally posted by Chika Ogiue:
Originally posted by D. Flame:
I am not interested in excuses. Community transactions should required 2FA, full stop, period, do not pass go - do not collect $200.
Valve used to do that.
I don't care about opinions on the matter. The fact remains that it should have been enabled because it would have factually reduced theft. Full stop.
Last edited by D. Flame; Jan 16 @ 3:06am
Originally posted by D. Flame:
I don't care about opinions on the matter. The fact remains that it should have been enabled because it would have factually reduced theft. Full stop.

Okay. Good luck with that. If you wish to discuss it further, make your own topic. As you are not helping the OP with their problem.
D. Flame Jan 16 @ 3:32am 
Originally posted by Chika Ogiue:
Originally posted by D. Flame:
I don't care about opinions on the matter. The fact remains that it should have been enabled because it would have factually reduced theft. Full stop.

Okay. Good luck with that. If you wish to discuss it further, make your own topic. As you are not helping the OP with their problem.
They will receive no help. Not from us, not from Steam. I am simply telling them the truth, and dispelling the gaslighting. Their funds are gone. There is nothing we can do to help them get those funds back, and Steam will refuse to do so.
Last edited by D. Flame; Jan 16 @ 3:33am
eram Jan 16 @ 3:38am 
Originally posted by Chika Ogiue:
Originally posted by D. Flame:
I don't care about opinions on the matter. The fact remains that it should have been enabled because it would have factually reduced theft. Full stop.

Okay. Good luck with that. If you wish to discuss it further, make your own topic. As you are not helping the OP with their problem.
im not sure what you think can be done,

user just needs to secure their account and never click random stuff or give away their info
they wont get any items back, they wont get any steam credit , no wallet funds will ever be returned. flame was 100% correct.
Originally posted by D. Flame:
They will receive no help. Not from us, not from Steam.

Funny. I thought I provided help in my first post. Not scotch mist.

Originally posted by eram:
im not sure what you think can be done,

I think you're both confused. My comment to Flame is for his insisting a feature be added that Valve removed because people complained it existed. I already stated in my very first post that the wallet funds (unless attached to currently pending transaction) were lost. Perhaps read the full topic first before jumping in.
eram Jan 16 @ 4:17am 
Originally posted by Chika Ogiue:
Originally posted by D. Flame:
They will receive no help. Not from us, not from Steam.

Funny. I thought I provided help in my first post. Not scotch mist.

Originally posted by eram:
im not sure what you think can be done,

I think you're both confused. My comment to Flame is for his insisting a feature be added that Valve removed because people complained it existed. I already stated in my very first post that the wallet funds (unless attached to currently pending transaction) were lost. Perhaps read the full topic first before jumping in.
they wont get money back read the 1st post :D preeeeeehaps
D. Flame Jan 16 @ 4:23am 
Originally posted by Chika Ogiue:
Originally posted by D. Flame:
They will receive no help. Not from us, not from Steam.

Funny. I thought I provided help in my first post.

This is the question that they asked:

Originally posted by Joystick:
How can I get my steam wallet back?

The only correct answer is that "they won't."

The only way to prevent these hacks from happening in the future is for Valve to require 2FA on every transaction.

That doesn't mean if you buy 20 items at once, you need to activate a 2FA 20 times in a row. Just once per cart.

And if you list 20 items, it doesn't mean you have do 20 different 2FAs at the time of purchase. You can do one 2FA for the cart at the time of listing.

It is a well known fact that there is a hack that allows people to have their session id hijacked, and it allows a bad actor to be signed in just like you would be. However, it does not allow them to authorize new 2FA prompts, so having an 2FA on every transaction would prevent this hack from allowing bad actors to steal funds.

I can only imagine that people who argue so hard against this simple fix must have something to gain from these thefts, just saying.
< >
Showing 1-13 of 13 comments
Per page: 1530 50

Date Posted: Jan 16 @ 1:44am
Posts: 13