AraMaruMir Oct 3, 2020 @ 4:45am
Hijacked Account - is there a wait time on buy/sell/trade if the entire profile was updated?
My friend's account was hijacked today and was wondering if there's a wait time on the trade (similar to 7day or 15day ban) if his entire profile was updated?
Originally posted by Dr.Shadowds 🐉:
Items goes on hold for 15 days, you need the mobile authenticator to bypass holds, contact support right away.

When your account get hijacked, and password, or email get charged, you're given an email no matter what which you follow that link to lock your account, this stop the hijacker from doing anything else with your account.

Do the recovery process, choose you do not have access to email, because you wouldn't have access to email that has been changed on the account. If it ask to provide proof like PayPal, or filling in details such as credit card, you can do that, and it should give you options to recovery your account, then all you have to do is unlock your account with the code you got when you locked it.
https://support.steampowered.com/kb_article.php?ref=6416-FHVM-3982&l=english


If you can't do those simple steps, than you need to contact support, by filling out the account recovery form, and provide details that support ask from you. To do search by account login name, put in fake email that doesn't exist, it will fail the search, and a blue box appar proving you an option to search by account name, put in your login name, and it should bring up your account, then click on do not have access to email, same with forgot password, and you should be at the form to fill out.
https://support.steampowered.com/kb_article.php?ref=5421-QTFB-3090

Follow these steps to secure your account after you got it back, don't skip any.
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Most common reason people get accounts hijack for any service really are as followed.
- Sharing account infomation with others. <--- Very common with impersonators, pretending to be Steam admin / support.
- Logging in on phishing sites. <--- Very common with skin gambling sites.
- Downloading / Installing Virus / Keylogger on your system.
- Using public devices that has keyloggers, such as cyber cafe, school computers, and etc...
- Storing your login credentials on a unsecured service that others has access to view.
- Using same login credentials for all your things, or using same login credentials on another service that had a data leak. Yes it does matter because even if it not related to Steam, if using same login credentials, hijackers will try to use those credentials to see what services you use with those credentials. https://haveibeenpwned.com/
https://m.youtube.com/watch?v=9TRR6lHviQc

Steam support will not return your traded items.
https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003
< >
Showing 1-7 of 7 comments
Donkey Oct 3, 2020 @ 4:50am 
The same thing happened to me let me know if you figure it out my discord is くそ101#8355
He should have gotten an email about email change, with a lock account link.

Specify what happened to your friend.
Last edited by Muppet among Puppets; Oct 3, 2020 @ 4:56am
The author of this thread has indicated that this post answers the original topic.
Dr.Shadowds 🐉 Oct 3, 2020 @ 5:10am 
Items goes on hold for 15 days, you need the mobile authenticator to bypass holds, contact support right away.

When your account get hijacked, and password, or email get charged, you're given an email no matter what which you follow that link to lock your account, this stop the hijacker from doing anything else with your account.

Do the recovery process, choose you do not have access to email, because you wouldn't have access to email that has been changed on the account. If it ask to provide proof like PayPal, or filling in details such as credit card, you can do that, and it should give you options to recovery your account, then all you have to do is unlock your account with the code you got when you locked it.
https://support.steampowered.com/kb_article.php?ref=6416-FHVM-3982&l=english


If you can't do those simple steps, than you need to contact support, by filling out the account recovery form, and provide details that support ask from you. To do search by account login name, put in fake email that doesn't exist, it will fail the search, and a blue box appar proving you an option to search by account name, put in your login name, and it should bring up your account, then click on do not have access to email, same with forgot password, and you should be at the form to fill out.
https://support.steampowered.com/kb_article.php?ref=5421-QTFB-3090

Follow these steps to secure your account after you got it back, don't skip any.
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Most common reason people get accounts hijack for any service really are as followed.
- Sharing account infomation with others. <--- Very common with impersonators, pretending to be Steam admin / support.
- Logging in on phishing sites. <--- Very common with skin gambling sites.
- Downloading / Installing Virus / Keylogger on your system.
- Using public devices that has keyloggers, such as cyber cafe, school computers, and etc...
- Storing your login credentials on a unsecured service that others has access to view.
- Using same login credentials for all your things, or using same login credentials on another service that had a data leak. Yes it does matter because even if it not related to Steam, if using same login credentials, hijackers will try to use those credentials to see what services you use with those credentials. https://haveibeenpwned.com/
https://m.youtube.com/watch?v=9TRR6lHviQc

Steam support will not return your traded items.
https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003
AraMaruMir Oct 3, 2020 @ 5:18am 
Originally posted by Muppet among Puppets:
He should have gotten an email about email change, with a lock account link.

Specify what happened to your friend.

He received a message with a link from PUBG, or so he thought. Yes he clicked on the link thinking that it was legit, but was kicked out of Monster Hunter that he was playing shortly after. When he tried to login, the password wasn't a match. Checked his email and found out that his entire profile had been updated in a matter of minutes (i.e. password, email, phone number, and steam guard). Unfortunately, none of the links in the email confirming the changes allowed him to undo them.
He already received confirmation on his request to retrieve his account, but being that it's Saturday 5:17am in WA, he has yet to hear back.
Dr.Shadowds 🐉 Oct 3, 2020 @ 5:21am 
He get it back today or tomorrow, depending how many tickets are ahead of him for account issues.

I suggest your friend read my post, and watch the video to better educate himself.
The same thing happened to me let me know if you figure it out my discord is くそ101#8355

Bruh you're gonna advert your discord on someone's "i just got scammed'' thread? do you have no shame?
AraMaruMir Oct 3, 2020 @ 5:29am 
Originally posted by Dr.Shadowds 🐉:
He get it back today or tomorrow, depending how many tickets are ahead of him for account issues.

I suggest your friend read my post, and watch the video to better educate himself.

Thank you very much for the information. I'll definitely have him come check out your comment and share with other friends as a precaution.
< >
Showing 1-7 of 7 comments
Per page: 1530 50

Date Posted: Oct 3, 2020 @ 4:45am
Posts: 7