Items lost in trade offer?

[Swiper]

So me and my friend were talking and my friend wanted to lend me some skins. But when he sent a trade offer i could not accept it i was saying canceled but on my friends screen/account it says it was accepted. but none of the items were in both of our inventory's they are very expensive skins what should i do?

[cSg|mc-Hotsauce]

His account is compromised and seeing you past names suggest yours might be as well.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

[Swiper]

Oprindeligt skrevet af cSg|mc-Hotsauce:

His account is compromised and seeing you past names suggest yours might be as well.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

:qr:

yes but what happened to the skin i understand its compromise but where is the skins

[cSg|mc-Hotsauce]

It was sent to an impersonator account. He needs to report it through their profile.

The skin is gone for good.

Both of you follow all the steps.

[Jerry]

Oprindeligt skrevet af Jurono Jobana:

yes but what happened to the skin i understand its compromise but where is the skins

Your friend has a bot in his account. Whenever he creates a valuable trade offer, the bot cancels it, makes a sockpuppet account take the name and avatar of the intended trade partner and then sends the offer to this one instead. This whole thing takes less than a second, and your friend received the confirmation for this trade on his phone.

The item was sent to the account of the thief with your friend agreeing to it unknowingly (he could have recognised the warning messages, that his trade partner is not on his friends list, has recently changed his name, has the same name as somebody on his friends list and has the wrong level and account age).

Steam has a strict "finders, keepers" policy in this regard. The items are gone.
The steps above are meant to make sure, that it does not happen again, at least until your friend enters his Steam login into another phishing site.

[StickyPawz]

Oprindeligt skrevet af Jurono Jobana:

yes but what happened to the skin i understand its compromise but where is the skins

Your friend will have a record of the trade in his history. The items could be already be passed to another account. The name of that account will keep changing as it's being used to fool others.

Your friend can report that user.

[Swiper]

Oprindeligt skrevet af Jerry:

Oprindeligt skrevet af Jurono Jobana:

yes but what happened to the skin i understand its compromise but where is the skins

Your friend has a bot in his account. Whenever he creates a valuable trade offer, the bot cancels it, makes a sockpuppet account take the name and avatar of the intended trade partner and then sends the offer to this one instead. This whole thing takes less than a second, and your friend received the confirmation for this trade on his phone.

The item was sent to the account of the thief with your friend agreeing to it unknowingly (he could have recognised the warning messages, that his trade partner is not on his friends list, has recently changed his name, has the same name as somebody on his friends list and has the wrong level and account age).

Steam has a strict "finders, keepers" policy in this regard. The items are gone.
The steps above are meant to make sure, that it does not happen again, at least until your friend enters his Steam login into
another phishing site.

Your right he got scammed by someone who impersonated my acc welp gg he quit cs thx to people who reply

[J4MESOX4D]

Oprindeligt skrevet af Jurono Jobana:

Oprindeligt skrevet af Jerry:

Your friend has a bot in his account. Whenever he creates a valuable trade offer, the bot cancels it, makes a sockpuppet account take the name and avatar of the intended trade partner and then sends the offer to this one instead. This whole thing takes less than a second, and your friend received the confirmation for this trade on his phone.

The item was sent to the account of the thief with your friend agreeing to it unknowingly (he could have recognised the warning messages, that his trade partner is not on his friends list, has recently changed his name, has the same name as somebody on his friends list and has the wrong level and account age).

Steam has a strict "finders, keepers" policy in this regard. The items are gone.
The steps above are meant to make sure, that it does not happen again, at least until your friend enters his Steam login into
another phishing site.

Your right he got scammed by someone who impersonated my acc welp gg he quit cs thx to people who reply

Tell your friend to stop giving his credentials away to phishing sites.

[Swiper]

Oprindeligt skrevet af J4MESOX4D:

Oprindeligt skrevet af Jurono Jobana:

Your right he got scammed by someone who impersonated my acc welp gg he quit cs thx to people who reply

Tell your friend to stop giving his credentials away to phishing sites.

The only site that he goes is cs.money and he goes frequently. Is cs.money a fishing site?

[cSg|mc-Hotsauce]

It most likely had a redirected phishing login page to steal all his account info.

[Swiper]

Oprindeligt skrevet af cSg|mc-Hotsauce:

It most likely had a redirected phishing login page to steal all his account info.

:qr:

But how is it possible my friend has two factor authentication

[whatamidoing]

Oprindeligt skrevet af Jurono Jobana:

Oprindeligt skrevet af cSg|mc-Hotsauce:

It most likely had a redirected phishing login page to steal all his account info.

:qr:

But how is it possible my friend has two factor authentication

Because he gave the phishing page the code as well

[cSg|mc-Hotsauce]

Oprindeligt skrevet af Jurono Jobana:

Oprindeligt skrevet af cSg|mc-Hotsauce:

It most likely had a redirected phishing login page to steal all his account info.

But how is it possible my friend has two factor authentication

"ALL" the account info.

[J4MESOX4D]

Oprindeligt skrevet af Jurono Jobana:

Oprindeligt skrevet af cSg|mc-Hotsauce:

It most likely had a redirected phishing login page to steal all his account info.

:qr:

But how is it possible my friend has two factor authentication

Because he gave his login, password AND authenticator code into a fake Steam login window and these credentials were then login-botted into a real client without the users knowledge.