account hacked

[Kine]

so a couple days ago some with a russian email-adress stole my account (after the ea-hack. had the same password there..), changed adress and password, started at least a couple of my games (? i don't have many and why??) added a strange person as friend (who the heck is a vanilla with a heart symbol from argentina?). now i changed the passwords on everything and somehow got into my account here - but i can't change the e-mail. i get an "error 5" and soon the thief will set the password back. whatever for i don't know - don't even have a full euro my wallet and only push money there shortly before buying a timecard for swtor. trying to get the e-mail changed and the telling the support about the hack only gets me til after the verification of my creditcard (that works) but i won't get a code from steam on my mail adress (no spamblocker, all noted steam adresses added to whitelist and so on) ... heck i don't rightly know what to do anymore. at least i made this little post, and if the password changes again its not like i can do anything about it. happy that my main swtor account runs over another email and so i could download it from their main page, but i really would like to have everything on my steam-account back to normal cause its easier to buy time-cards here ..

[Teksura]

Sounds like your problem is simply "can't change email address linked to the account". What is the exact error message you are getting beyond "error 5"?

The Steam servers have been getting slammed because of the sale, and this can cause errors when they are overloaded. Have you tried waiting some time (10-15 minutes) and trying again? How many times and how long have you waited before another attempt?

[Kine]

hello and thank you taking the time to read my little rant and even being willing to try to help :) the full message was "an error occurred trying to handle that request (error 5) " about almost an hour ago now. and trying for an email from steam with a code to change stuff was tried every couple days, sometimes hourly for the last two weeks - so yes, there was enough wait time i suppose. at the moment i'm mostly resigned that the owner of that russian email will change the password again sometime. pleasently suprised it hasn't happened yet - but not feeling comfortable handling anything on this account (and absolutly not loading up my wallet again) until i can change the email adress back

[Kine]

And the person changed my password once more. Reseting password worked, but as always no email from steam with code so that will happen again.. Is it legal to post that persons email adress, so it's easier to find if they did that with others too?

[Kine]

now i turned all these damn cards into gems, the thief shouldn't profit from their actions. can i delete those gems, or something? never did anything with the cards so no idea what to do now as long as i have the account myself again

[Bee🐝]

Originally posted by shatara:

And the person changed my password once more. Reseting password worked, but as always no email from steam with code so that will happen again.. Is it legal to post that persons email adress, so it's easier to find if they did that with others too?

No naming and shaming. PSA threads are totally pointless anyway.

Rather, it's obvious your account isn't actually secure yet so focus on that. Recover the account properly, and more importantly start with locking it to prevent further access. For that see step 1 in the guide.

Recovering Steam Account https://support.steampowered.com/kb_article.php?ref=2347-qdfn-4366

And to help you sign-in: https://help.steampowered.com/en/wizard/HelpWithLogin
Note, you must be signed out to do this.

A step by step guide to the Recovery Process:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560
Also, because this regularly comes up, you DO NOT need access to the email, phone or password currently tied to the hijacked account for this to work. Just pick the "I do not have access..." or a similar option when asked. JUST SCROLL DOWN.

You MUST also take the following steps to secure your account:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey - This field should be blank

Do NOT trade until your account is secured.

Also, your account wasn't compromised in some EA "hack". You got phished and then scammed most likely by a "totally" trustworthy third-party trade site.

[Teksura]

When you go through support, try informing them that you're having difficulty changing the email and ask if support is able to change it for you.

[Kine]

Thank you so much for all your help. Found the trouble with not getting the steam emails and now everything is fixed! (before changing the password for my email account, someone did add a filter that all steam emails get into a new place - that one deleted, just for sure another password change everywhere and now steam support selfhelp functions). Thank you!


(also trading is not an issue - never did that before and can't say i'm interested in that now)