STEAM ATE MY SKINS

[SonnyDeeLite]

i was trading some skins to my friend so he can use them, after i confirmed the trade, the skins just disappeared and are not a part of my inventory or his inventory

[999999999]

Look at the trade history "carefully." Where did the skins go?

[SpunkyJones]

Ya, you’ve got some malware probably. Check the history carefully.

[Satoru]

You were phished and traded your skins to a different user

[Teksura]

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.


Do each of the steps.



What happened is your account became compromised, most likely through a third party site like that shady scam site you're advertising in your display name. This well known scam then requires you to authorize the trade giving your items away after you allow them access to your account through either malware, or giving away your details through a phishing fake login page or other trick used by those shady third party sites. The way it does this is after it gets access to your account, a bot waits until you send out a trade offer, and then using the access you gave to them, their bot cancels the trade, changes a bot account to match the name and profile picture of the person you wanted to trade with, and then sends a trade giving your stuff away for free.

The scam depends on you ignoring all the warnings, such as "this user is not on your friends list", "this user has a similar name to someone on your friends list", their items missing from the offer, the big "you will receive nothing" text, the fact that they have the wrong level, and a few other obvious warnings. It only works if you're not even looking at what you're doing. Sadly, an awful lot of people don't care enough to verify the trade is what they are expecting, so this scam continues to work.

Valve will not return items you gifted away to the scammer as a result of ignoring all the warnings.

[SonnyDeeLite]

Originally posted by Teksura:

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.


Do each of the steps.



What happened is your account became compromised, most likely through a third party site like that shady scam site you're advertising in your display name. This well known scam then requires you to authorize the trade giving your items away after you allow them access to your account through either malware, or giving away your details through a phishing fake login page or other trick used by those shady third party sites. The way it does this is after it gets access to your account, a bot waits until you send out a trade offer, and then using the access you gave to them, their bot cancels the trade, changes a bot account to match the name and profile picture of the person you wanted to trade with, and then sends a trade giving your stuff away for free.

The scam depends on you ignoring all the warnings, such as "this user is not on your friends list", "this user has a similar name to someone on your friends list", their items missing from the offer, the big "you will receive nothing" text, the fact that they have the wrong level, and a few other obvious warnings. It only works if you're not even looking at what you're doing. Sadly, an awful lot of people don't care enough to verify the trade is what they are expecting, so this scam continues to work.

Valve will not return items you gifted away to the scammer as a result of ignoring all the warnings.

so basically all i have to do to fix this issue for further trading is to change my steam password, scan for malware, and deauthorize other devices

[Snapjak]

Also revoke the key. Do NOT skip that step.

[SkullBag]

For the future, do not give your Steam login to a site or app that is not Steam.

[SonnyDeeLite]

yea im new to the whole trading thing and luckily i only lost like a 7 dollar skin but i didnt want to lose more, thanks so much guys!

[SonnyDeeLite]

Originally posted by Snapjak:

Also revoke the key. Do NOT skip that step.

How do i revoke this ?

[SonnyDeeLite]

Originally posted by Snapjak:

Also revoke the key. Do NOT skip that step.

or what if i havent registered for one yet

[Snapjak]

Originally posted by Teksura:

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey <------------------------------------
Stop using shady third party trade sites or clicking suspicious links.


Do each of the steps.

[SonnyDeeLite]

thanks