Brilliant Scam

[I will buy new *******.]

I sold my skins at bitskins, I received trade offer and confirmed it from my phone as a bitskin's BOT but what happened is the bitskins offer got cancelled somehow and a random steam profile with level (0) accepted my skins.

And i was giving AK-47 to my friend, I clearly saw his name and sent him the AK-47 but suddenly the trade from his account got declined and my item went to a random dude.

Here's the screenshot: https://ibb.co/3pL5xC4

As you can see it said "Bitskins token XXXXXXXXX"

[I will buy new *******.]

I lost my skins man, How the hell is this possible?

[аdvicebanana]

Originally posted by ツ Lᴜᴄɪғᴇʀ:

I lost my skins man, How the hell is this possible?

As the first reply already said, you have been phished at some point. Read this:
https://forums.steamrep.com/pages/hijacking/

[Crazy Tiger]

Originally posted by ツ Lᴜᴄɪғᴇʀ:

I lost my skins man, How the hell is this possible?

You gave away your login credentials. Those sites you use to sell skins and such? They're not safe.

[StillFrozen]

I love when people “Trust” 3rd party websites.

Just take it as a lesson learned and move on, nothing can be done.

[I will buy new *******.]

I know ofcourse i revoked my API, And yes there was some random junk codes at my API address.

Anyways i’ll try my best to get my skins back!

[Natalya]

Originally posted by ツ Lᴜᴄɪғᴇʀ:

I know ofcourse i revoked my API, And yes there was some random junk codes at my API address.

Anyways i’ll try my best to get my skins back!

You can't

Originally posted by cSg|mc-Hotsauce:

Also read the Steam Item Restoration Policy

[Zekiran]

Seriously why use off-steam sites to do ANYTHING?

They are

LITERALLY

ALL

SCAMS.

[Teksura]

Originally posted by ツ Lᴜᴄɪғᴇʀ:

I lost my skins man, How the hell is this possible?

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.


Do each of the steps.



What happened is your account became compromised, most likely through a third party site. This well known scam then requires you to authorize the trade giving your items away after you allow them access to your account through either malware, or giving away your details through a phishing fake login page or other trick used by those shady third party sites.

The way it does this is after it gains access to your account, a bot waits until you send out a trade offer, and then using the access you gave to them, their bot cancels the trade, changes a bot account to match the name and profile picture of the person you wanted to trade with, and then sends a trade giving your stuff away for free.

The scam depends on you ignoring all the warnings, such as "this user is not on your friends list", "this user has a similar name to someone on your friends list", their items missing from the offer, the big "you will receive nothing" text, the fact that they have the wrong level, wrong "has been on Steam since" date (usually obviously too recent to make sense), and a few other obvious warnings. It only works if you're not even looking at what you're doing. Sadly, an awful lot of people don't care enough to verify the trade is what they are expecting, so this scam continues to work.

Valve will not return items you gifted away to the scammer as a result of ignoring all the warnings. https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

[wuddih]

the replaced trade was an INCOMING trade offer and you accepted and confirmed that.

[I will buy new *******.]

Originally posted by wuddih:

the replaced trade was an INCOMING trade offer and you accepted and confirmed that.

Exactly this is what happened, The genuine trade offer was denied automatically from my end and the scammer's auto bot changed it's name, profile picture, token id to the BitSkins token and i accepted and confirmed the trade.

[Brujeira]

Originally posted by ツ Lᴜᴄɪғᴇʀ:

Originally posted by wuddih:

the replaced trade was an INCOMING trade offer and you accepted and confirmed that.

Exactly this is what happened, The genuine trade offer was denied automatically from my end and the scammer's auto bot changed it's name, profile picture, token id to the BitSkins token and i accepted and confirmed the trade.

And it’s still your fault for giving your login details away. You have done all the steps that previous posters have listed to secure your account, right?

[Zekiran]

And stopped using that and all other non-steam-window sites to do anything, right?

[crunchyfrog]

Originally posted by ツ Lᴜᴄɪғᴇʀ:

I know ofcourse i revoked my API, And yes there was some random junk codes at my API address.

Anyways i’ll try my best to get my skins back!

You can't.

These sites are set up to scam you. That's their purpose.

They prey on your greed - the fact that you can trade your items for REAL CASH. Then you login via Steam (except it isn't and they're harvesting your credentials), then they take control of your account.

You ever wondered why Valve don't allow you to trade for cash? Now you do.

ALWAYS stay within the Steam system. Stop falling for dumb scams and temper your greed.