Swiper Jul 20, 2019 @ 7:33am
Items lost in trade offer?
So me and my friend were talking and my friend wanted to lend me some skins. But when he sent a trade offer i could not accept it i was saying canceled but on my friends screen/account it says it was accepted. but none of the items were in both of our inventory's they are very expensive skins what should i do?
Originally posted by Jerry:
Originally posted by Jurono Jobana:
yes but what happened to the skin i understand its compromise but where is the skins

Your friend has a bot in his account. Whenever he creates a valuable trade offer, the bot cancels it, makes a sockpuppet account take the name and avatar of the intended trade partner and then sends the offer to this one instead. This whole thing takes less than a second, and your friend received the confirmation for this trade on his phone.

The item was sent to the account of the thief with your friend agreeing to it unknowingly (he could have recognised the warning messages, that his trade partner is not on his friends list, has recently changed his name, has the same name as somebody on his friends list and has the wrong level and account age).

Steam has a strict "finders, keepers" policy in this regard. The items are gone.
The steps above are meant to make sure, that it does not happen again, at least until your friend enters his Steam login into another phishing site.
< >
Showing 1-13 of 13 comments
cSg|mc-Hotsauce Jul 20, 2019 @ 7:34am 
His account is compromised and seeing you past names suggest yours might be as well.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

:qr:
Swiper Jul 20, 2019 @ 7:48am 
Originally posted by cSg|mc-Hotsauce:
His account is compromised and seeing you past names suggest yours might be as well.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

:qr:

yes but what happened to the skin i understand its compromise but where is the skins
cSg|mc-Hotsauce Jul 20, 2019 @ 7:49am 
It was sent to an impersonator account. He needs to report it through their profile.

The skin is gone for good.

Both of you follow all the steps.

:qr:
The author of this thread has indicated that this post answers the original topic.
Jerry Jul 20, 2019 @ 7:53am 
Originally posted by Jurono Jobana:
yes but what happened to the skin i understand its compromise but where is the skins

Your friend has a bot in his account. Whenever he creates a valuable trade offer, the bot cancels it, makes a sockpuppet account take the name and avatar of the intended trade partner and then sends the offer to this one instead. This whole thing takes less than a second, and your friend received the confirmation for this trade on his phone.

The item was sent to the account of the thief with your friend agreeing to it unknowingly (he could have recognised the warning messages, that his trade partner is not on his friends list, has recently changed his name, has the same name as somebody on his friends list and has the wrong level and account age).

Steam has a strict "finders, keepers" policy in this regard. The items are gone.
The steps above are meant to make sure, that it does not happen again, at least until your friend enters his Steam login into another phishing site.
StickyPawz Jul 20, 2019 @ 8:07am 
Originally posted by Jurono Jobana:
yes but what happened to the skin i understand its compromise but where is the skins


Your friend will have a record of the trade in his history. The items could be already be passed to another account. The name of that account will keep changing as it's being used to fool others.

Your friend can report that user.
Swiper Jul 20, 2019 @ 8:10am 

Originally posted by Jerry:
Originally posted by Jurono Jobana:
yes but what happened to the skin i understand its compromise but where is the skins

Your friend has a bot in his account. Whenever he creates a valuable trade offer, the bot cancels it, makes a sockpuppet account take the name and avatar of the intended trade partner and then sends the offer to this one instead. This whole thing takes less than a second, and your friend received the confirmation for this trade on his phone.

The item was sent to the account of the thief with your friend agreeing to it unknowingly (he could have recognised the warning messages, that his trade partner is not on his friends list, has recently changed his name, has the same name as somebody on his friends list and has the wrong level and account age).

Steam has a strict "finders, keepers" policy in this regard. The items are gone.
The steps above are meant to make sure, that it does not happen again, at least until your friend enters his Steam login into
another phishing site.



Your right he got scammed by someone who impersonated my acc welp gg he quit cs thx to people who reply
J4MESOX4D Jul 20, 2019 @ 9:03am 
Originally posted by Jurono Jobana:
Originally posted by Jerry:

Your friend has a bot in his account. Whenever he creates a valuable trade offer, the bot cancels it, makes a sockpuppet account take the name and avatar of the intended trade partner and then sends the offer to this one instead. This whole thing takes less than a second, and your friend received the confirmation for this trade on his phone.

The item was sent to the account of the thief with your friend agreeing to it unknowingly (he could have recognised the warning messages, that his trade partner is not on his friends list, has recently changed his name, has the same name as somebody on his friends list and has the wrong level and account age).

Steam has a strict "finders, keepers" policy in this regard. The items are gone.
The steps above are meant to make sure, that it does not happen again, at least until your friend enters his Steam login into
another phishing site.



Your right he got scammed by someone who impersonated my acc welp gg he quit cs thx to people who reply
Tell your friend to stop giving his credentials away to phishing sites.
Swiper Jul 20, 2019 @ 4:55pm 
Originally posted by J4MESOX4D:
Originally posted by Jurono Jobana:



Your right he got scammed by someone who impersonated my acc welp gg he quit cs thx to people who reply
Tell your friend to stop giving his credentials away to phishing sites.




The only site that he goes is cs.money and he goes frequently. Is cs.money a fishing site?
cSg|mc-Hotsauce Jul 20, 2019 @ 4:56pm 
It most likely had a redirected phishing login page to steal all his account info.

:qr:
Swiper Jul 20, 2019 @ 4:59pm 
Originally posted by cSg|mc-Hotsauce:
It most likely had a redirected phishing login page to steal all his account info.

:qr:

But how is it possible my friend has two factor authentication
whatamidoing Jul 20, 2019 @ 4:59pm 
Originally posted by Jurono Jobana:
Originally posted by cSg|mc-Hotsauce:
It most likely had a redirected phishing login page to steal all his account info.

:qr:

But how is it possible my friend has two factor authentication
Because he gave the phishing page the code as well
cSg|mc-Hotsauce Jul 20, 2019 @ 5:00pm 
Originally posted by Jurono Jobana:
Originally posted by cSg|mc-Hotsauce:
It most likely had a redirected phishing login page to steal all his account info.

:qr:

But how is it possible my friend has two factor authentication

"ALL" the account info.

:qr:
J4MESOX4D Jul 21, 2019 @ 1:05am 
Originally posted by Jurono Jobana:
Originally posted by cSg|mc-Hotsauce:
It most likely had a redirected phishing login page to steal all his account info.

:qr:

But how is it possible my friend has two factor authentication
Because he gave his login, password AND authenticator code into a fake Steam login window and these credentials were then login-botted into a real client without the users knowledge.
< >
Showing 1-13 of 13 comments
Per page: 1530 50

Date Posted: Jul 20, 2019 @ 7:33am
Posts: 13