Unauthorized transaction

[1Hit2Deaths]

I got an Unauthorized transaction from 19 april from steam with my paypal account...paypal gave me money back and steam locked my account for 3 days due fraudulous activity and after that steam fixed the problem but and yestarday Steam opened dispute from that transaction and my steam account its blocked 4 weeks from now what gonna happen now ? i contacted paypal already and steam but no idea how long it takes for reply..

[Hanomaly]

So you're saying that on April 19th, someone used your paypal to buy a game for YOUR account, but you did not give them permission to do this?

Who did that? It must be someone with access to both your paypal AND your steam account, otherwise it wouldn't make sense that they'd buy the "unauthorised" game for YOUR account, vs for their own.

Do you know who did it? One of your children? Your significant-other?

[1Hit2Deaths]

I didn't received any notification of login on my paypal account or steam account, steam deducted 100 pounds from my bank account with paypal without my permission and after 10mins somebody bought from market a skin weapon without my permission and when this happened steam locked my account due fraudulous activity

[1Hit2Deaths]

Somebody charged my steam account with x amount of money from my bank account without my permission and after 10 mins somebody bought something from market(skin weapon for cs go) with that credit from steam wallet and my account has been locked for 3 days i contacted paypal they gave me those money back and after 3 days steam fixed the situation of my account and yestarday they opened dispute and locked my steam account for 4 weeks

[J4MESOX4D]

Your account did a chargeback regardless using your payment method. If the restriction tells you to reverse it then you must do that else the month lock becomes permanent.

[1Hit2Deaths]

Yea but it wasn't my fault somebody made that transaction and somebody bought with my account that skin from market so those money has been deducted from my credit

[1Hit2Deaths]

Steam didn't gave me back those money from that skin and i used the others left because i was afraid to don't get scammed again with the market

[J4MESOX4D]

Originally posted by 1Hit2Deaths:

Yea but it wasn't my fault somebody made that transaction and somebody bought with my account that skin from market so those money has been deducted from my credit

Actions have consequences. You need to work out how your Steam account AND PayPal were both compromised. Valve now need to pay fees on the chargeback plus there is a deficit of the monetary amount of the item on top.

[1Hit2Deaths]

Somebody got the access to my paypal with my steam account right ? Why i didn't got any notification of login from another computer or something ? All the time when i login to paypal i get unique cod on my phone without that you can't login for steam same but with mail when that payment has been made paypal just gave me notification of payment has been made without any notification of login and from steam as well nobody else connected to my accounts steam just deducted that money from my account without permission

[1Hit2Deaths]

I just got an russian mail after the payment as a receipt that was all steam didn't gave me any information about this or how happened

[J4MESOX4D]

Originally posted by 1Hit2Deaths:

Somebody got the access to my paypal with my steam account right ?

Not possible. When a new login is detected, ALL attached payment methods are removed from the account for the users protection. This means your PayPal is compromised on top.

You need to work out what happened, ensure that all your accounts are secured and then reverse the chargeback which will put the funds back into your wallet.

[MagicMight]

If you got a steam receipt in Russian then someone else definitely logged in your steam account to make the purchase. Check https://help.steampowered.com/en/accountdata/SteamLoginHistory to confirm this.


If you are using the Steamguard 2FA on your phone then you were phished. If you are using Steamguard with your mail then there are three possibilities:
-You were once again phished.
-You are infected with malware( keylogger or RAT).
-You are reusing the same password everywhere and there was a security breach on one of the sites you are using, giving someone access to your mail and steam account.


The fact that you have 2FA on your paypal account and you still got charged could only have happened if you have set steam as one of your pre-approved payments. If you clicked by mistake 'remember my paypal' when making a purchase previously then this is what happened. Go to your paypal settings and check your pre-approved payments.


About the money loss... yep, you're going to have to take the hit and pay it back if you want to keep your account unlocked.

Edit upon reading J4MESOXD's response above mine: If the 'saved' paypal is removed as well when a login from a new location happens (I have no idea if that happens with pre-approved purchases since that is on paypal's side) then I can only think of RAT as the way this happened.

[1Hit2Deaths]

Paypal closed the case when they gave me the money back i tried to contact via phone no chance they dont have staff due Covid 19 i sent them message to the chat im waiting for 2h for a reply...still waiting and i can't open another dispute if the case for that transaction is closed

[1Hit2Deaths]

Originally posted by MagicMight:

If you got a steam receipt in Russian then someone else definitely logged in your steam account to make the purchase. Check https://help.steampowered.com/en/accountdata/SteamLoginHistory to confirm this.


If you are using the Steamguard 2FA on your phone then you were phished. If you are using Steamguard with your mail then there are three possibilities:
-You were once again phished.
-You are infected with malware( keylogger or RAT).
-You are reusing the same password everywhere and there was a security breach on one of the sites you are using, giving someone access to your mail and steam account.


The fact that you have 2FA on your paypal account and you still got charged could only have happened if you have set steam as one of your pre-approved payments. If you clicked by mistake 'remember my paypal' when making a purchase previously then this is what happened. Go to your paypal settings and check your pre-approved payments.


About the money loss... yep, you're going to have to take the hit and pay it back if you want to keep your account unlocked.

Edit upon reading J4MESOXD's response above mine: If the 'saved' paypal is removed as well when a login from a new location happens (I have no idea if that happens with pre-approved purchases since that is on paypal's side) then I can only think of RAT as the way this happened.

I checked the login history and yes on that date somebody else logged on my account but i didn't got any notification of login from another computer

[MagicMight]

Originally posted by 1Hit2Deaths:

I checked the login history and yes on that date somebody else logged on my account but i didn't got any notification of login from another computer

You didn't give me too many details so I'll just make assumptions.
If you are using the phone authenticator and you got phished maybe you didn't realise at the time that someone else was logging in your account and you thought the phone's steamguard notification was for yourself.

If you are using email authentication maybe someone had access to your email too and deleted that specific email (but this does not sound too likely since if this was the case he would have deleted every pertinent email).

[1Hit2Deaths]

Originally posted by MagicMight:

Originally posted by 1Hit2Deaths:

I checked the login history and yes on that date somebody else logged on my account but i didn't got any notification of login from another computer

You didn't give me too many details so I'll just make assumptions.
If you are using the phone authenticator and you got phished maybe you didn't realise at the time that someone else was logging in your account and you thought the phone's steamguard notification was for yourself.

If you are using email authentication maybe someone had access to your email too and deleted that specific email (but this does not sound too likely since if this was the case he would have deleted every pertinent email).

Im using email authentification and i checked the activity there and there is only mine i don't have another connected user