All my Skins were stolen and i had mobile authentication

[Tanker4345]

I was away during summer working and i always loved csgo, hadn't played it for a while till tonight when i finally booted it back up to find all my skins had been scammed/stolen from me. what can i do to try and get my items back, the guy who scammed me i was never friends with nor did i ever talk to and the value of the trade should have been a huge red flag to begin with. someone help me please.

[Mad Scientist]

In your history and thus Groups, you have one of those sites you're not supposed to use;

skin / trade / 'free' / vote for my team / tournament sites / gambling or betting.

You have one of those specifically in your Groups, which chances are you used, thus gave away your Steam Login to a place that isn't Steam, authorizing an api key which bypasses Steam Guard since you allowed it to.

NEVER use your Steam Login outside of Steam. Stolen items will not be returned, Steam warns you of the risk of clicking outside of Steam.

Standard copy/paste we all use around here for this stuff:

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey
** If there is nothing in the API key area, that’s fine. If there IS something, remove it. Nothing should be there.**

No items that have been traded away during this time will be returned to you.

Change your Email’s password on your computer for safety

[Supafly]

Mobile authentication is just another key. If you give that key away to starngers those strangers have access. You must have logged in on a dodgy website that phished the login info you gave it.

YOU confirm tardes using the app.
YOU would have had warnings in the APP saying who you were trading with was NOT a friend. But you confirmed the trade anyway.

Your skins are gone all you can do now is secure the account and learn from the experience.

Do these to secure your account
Scan for Malware/virus https://www.malwarebytes.com/mwb-download/
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device, mobile phone for example.
Generate new back up codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

If you insist on using third party sites do it the safe way

1. Open Web browser
2. Login on Steams Official page
3. Visit Third party site
4. Look for and use the one click login button
5. If 4 doesn't work and you're asked for you username, password and Guard code your on a phishing site. LEAVE and DO NOT use again

Can also use sites like scamadviser.com to check how trustworthy a site is before using it. Works for any site not just Steam related. Use it whenever entering login credentials or banking data

[Tanker4345]

So i lose over 100 dollar and years worth of ♥♥♥♥ and all i get as an answer is get ♥♥♥♥♥♥, sick.

[Mad Scientist]

Originally posted by (B.O.E.R)Tanker4345:

So i lose over 100 dollar and years worth of ♥♥♥♥ and all i get as an answer is get ♥♥♥♥♥♥, sick.

You made that decision when you gave a site that is not Steam your Steam Login and authorized an API Key to bypass your Steam Guard. This is 100% solely on yourself.

[Tanker4345]

Originally posted by Mr. Gentlebot:

Originally posted by (B.O.E.R)Tanker4345:

So i lose over 100 dollar and years worth of ♥♥♥♥ and all i get as an answer is get ♥♥♥♥♥♥, sick.

You made that decision when you gave a site that is not Steam your Steam Login and authorized an API Key to bypass your Steam Guard. This is 100% solely on yourself.

i already said i didnt go on to some non steam site

[Supafly]

Originally posted by (B.O.E.R)Tanker4345:

So i lose over 100 dollar and years worth of ♥♥♥♥ and all i get as an answer is get ♥♥♥♥♥♥, sick.

And you didn't learn BASIC internet safety which is DO NOT enter login information of dodgy sites.
You also didn't heed the warnings from Valve nor the thousands of threads created by users that did the same ♥♥♥♥.
Oh and you ignored the warnings of the trade/s telling you the receiver is NOT your friend.

It sucks yes, no doubt there, but you brought it on yourself. So many things you SHOULD have done differently but you didn't. Learn from it otherwise next time someone could phish you bank details and empty your bank

[Supafly]

Originally posted by (B.O.E.R)Tanker4345:

Originally posted by Mr. Gentlebot:

You made that decision when you gave a site that is not Steam your Steam Login and authorized an API Key to bypass your Steam Guard. This is 100% solely on yourself.

i already said i didnt go on to some non steam site

Then how else did someone get you live Guard code? You know the 1 than changes every 30seconds or something?

How did someone else authorise the trades?

[Tanker4345]

Originally posted by Supafly:

Originally posted by (B.O.E.R)Tanker4345:

i already said i didnt go on to some non steam site

Then how else did someone get you live Guard code? You know the 1 than changes every 30seconds or something?

How did someone else authorise the trades?

if i knew that do you think id be here

[J4MESOX4D]

Originally posted by (B.O.E.R)Tanker4345:

Originally posted by Mr. Gentlebot:

You made that decision when you gave a site that is not Steam your Steam Login and authorized an API Key to bypass your Steam Guard. This is 100% solely on yourself.

i already said i didnt go on to some non steam site

At some stage you gave away your entire credential set to a phishing site. Either that or someone was able to guess you login, password AND a live auth code which in itself is about a one in one hundred trillion shot.

If you can't establish where this has happened then all you can do is learn from your mistake to ensure it doesn't happen again. Mobile authentication is just an extra security layer and it does not make your account immune to being hijacked the same way locks on houses don't always stop burglars getting in if there is negligence at play.

[poyqu]

Something similar also happened to me a while back- lost all my inventory and steam wallet, because they sold it to the steam market and bought their own stuff with my money

I think the reason was one of those steam playtime idle programms I had installed on my phone
if you have anything that can access your steam account outside of steam- log out and uninstall it, because it might keep happening