Fishy trader: Is this a scam?

[BlackheartKyurem]

So this guy added me, he said he wanted the spare Catastrophic Companions I had for trade, as well as my half dozen unusual taunts. He started offering Unusual hats, and even promised a golden frying pan. I checked his backpack and he seems to actually have these items. He’s also apparently “Trusted” on backpack.tf.

He told me he needed to make sure my items were “marketable” whatever that means, and first told me to go to -removed-. I logged into the site using steam but got a bad gateway error which he told me was because I’m in Canada.

He then told me to send a trade offer to a friend and screenshot the pending offer. Apparently this would tell him what he needed to know. He was extremely impatient and wanted to get the trade on right away but I told him I’d trade when I got back from work.

Am I being scammed?

[B-o-B]

Fake. Do Not Trade.

Scan for malware.
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device.
Generate new back up codes.
Revoke the API key https://steamcommunity.com/dev/apikey
Stop logging into 3rd party sites.

[Grogwind]

Scam.

You logged in to a fake website and you account credentials where stolen.


DO NOT TRADE YOUR ITEMS TO ANYONE!

The trade will be hijacked and they will send a counter offer from a bot account that looks just like the account you were trying to send your items to.

Follow the above advice given by threadbear

[wuddih]

remove the url please.

that is 100% a phishing site.

[J4MESOX4D]

BlackheartKyurem eredeti hozzászólása:

I logged into the site using steam but got a bad gateway error which he told me was because I’m in Canada.

It's a fake site - you just gave away all your credentials. Do the steps in #1 as an absolute priority.

[BlackheartKyurem]

Oh wow, I should’ve known. Thanks guys. I changed my password. Hopefully that’s enough until later.

[Grogwind]

BlackheartKyurem eredeti hozzászólása:

Oh wow, I should’ve known. Thanks guys. I changed my password. Hopefully that’s enough until later.

Carry out all the steps in post 1, changing your password is not enough by itself.

[J4MESOX4D]

BlackheartKyurem eredeti hozzászólása:

Oh wow, I should’ve known. Thanks guys. I changed my password. Hopefully that’s enough until later.

It's not by a long shot. Do these steps fully immediately https://steamcommunity.com/discussions/forum/1/1736595227851759279/?tscn=1541277241#c1736595227851763972

[BlackheartKyurem]

I removed my mobile authenticator, I’m on mobile right now and can’t get on PC for a couple hours. Can I generate new backup codes from here? I’m guessing I can’t, especially since I just removed the authenticator. Sorry, I’m kind of new with this.

[J4MESOX4D]

BlackheartKyurem eredeti hozzászólása:

I removed my mobile authenticator, I’m on mobile right now and can’t get on PC for a couple hours. Can I generate new backup codes from here? I’m guessing I can’t, especially since I just removed the authenticator. Sorry, I’m kind of new with this.

You weren't supposed to remove the authenticator - that's just made it worse as your account is wide open now. You're better off just locking the entire account for now https://support.steampowered.com/kb_article.php?ref=6416-FHVM-3982

[BlackheartKyurem]

He said deauthentize all devices, I thought that’s what he meant. I’m trying to find out where I can lock the account now.

[BlackheartKyurem]

It seems to lock my account I need a confirmation sent to my phone but the phone number on my account is one I no longer use.

In trying to change it I exceeded the number of allowed attempts and now all I can do is wait

Someone explain what “deauthorize all devices” means if not removing the steam guard authenticator from my phone

[Silicon Vampire]

Thread Bear™ eredeti hozzászólása:

Fake. Do Not Trade.

Scan for malware.
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device.
Generate new back up codes.
Revoke the API key https://steamcommunity.com/dev/apikey
Stop logging into 3rd party sites.

the appropriate link was in the first reply, had you bothered...

[Wolf Knight]

deauthorize all devices will remove all other computers from being able to access the account. if a computer that is not authorized attempts to use the account, an email message will be sent to you to comfirm that it is you using a different computer and that you wish to add it to the list of authorized computers

Others have made the same mistake about what deauthorize all other devices meant.

[BlackheartKyurem]

Thanks everyone, I followed the steps given now that I finally got access to my PC and I think I've avoided gettng scammed again.

Sorry that I was bad at following instructions, I was panicking.

[CJ HUNTER]

BlackheartKyurem eredeti hozzászólása:

Sorry that I was bad at following instructions, I was panicking.

Why weren't you panicking when some random stranger from the internet who wanted your items told you to login with your Steam account on a random scam website ? I can't understand this, please help me.