steam trading items gone wrong

[Veins]

i traded a tempered ak from my main account to my alt account and now its not here!!!! please help mods/admins

[Veins]

its been 1 full hours since they trade offer was completed

[The Giving One]

Check your trade history to be sure that the item was traded to the right account.

Yes, there is a very good reason I am suggesting to do this.

Also, if you have anything in this domain name field window, using the link below, and the trade history shows the item going to a different account, then your account is compromised :

https://steamcommunity.com/dev/apikey

And if so, you need to revoke that key in that window now. More steps might be needed also if there is text there. If not, just ignore this part, but still check the trade history.

[Veins]

i checked my trade history and it said that i traded it to the right account and i have never shared my password if so they would have to get through my mobile steam guard which i have not given to anyone except gambling sites to log in.
i dont have any record in the trading history trading the tempered ak to anyone

[Veins]

looks like my $40 skin just dissapeared into nothing but dust

[Veins]

and i checked in the trade history, it was added to my account but never recieved, i was constantly refreshing the page for like 5 minutes, i didnt use steam confirmation within that period since 1:10 the time i traded it between accounts, it was the right account i traded to.

[Veins]

whats domain name

[The Giving One]

Originally posted by Veins:

.....and i have never shared my password if so they would have to get through my mobile steam guard which i have not given to anyone except gambling sites to log in.

Simply using those shady sites and entering your Steam Login can compromise your account, possibly.

You give away the login when you enter your details at the site.

I suggested you check this link above :

Originally posted by The Giving One:

https://steamcommunity.com/dev/apikey

Is there anything in the text field when you click on that link ?

I see you said you are sure the trade went to the right account, but better safe than sorry. That's how the API scam can work, which is common around here with users logging into shady sites with Steam login. It makes a copy of the profile of the account you intend to trade to, and looks closely like the one you wanted to trade with.

If the history is correct, then so be it, but better check the link.

[Teksura]

Originally posted by Veins:

and i checked in the trade history, it was added to my account but never recieved

I bet you it wasn't. Check the profile of the account it was sent to, that's not your account.


Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.


Do each of the steps.



What happened is your account became compromised, most likely through a third party site. This well known scam then requires you to authorize the trade giving your items away after you allow them access to your account through either malware, or giving away your details through a phishing fake login page or other trick used by those shady third party sites.

The way it does this is after it gains access to your account, a bot waits until you send out a trade offer, and then using the access you gave to them, their bot cancels the trade, changes a bot account to match the name and profile picture of the person you wanted to trade with, and then sends a trade giving your stuff away for free.

The scam depends on you ignoring all the warnings, such as "this user is not on your friends list", "this user has a similar name to someone on your friends list", their items missing from the offer, the big "you will receive nothing" text, the fact that they have the wrong level, wrong "has been on Steam since" date (usually obviously too recent to make sense), and a few other obvious warnings. It only works if you're not even looking at what you're doing. Sadly, an awful lot of people don't care enough to verify the trade is what they are expecting, so this scam continues to work.

Valve will not return items you gifted away to the scammer as a result of ignoring all the warnings. https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

[Veins]

Originally posted by м:

Originally posted by Veins:

looks like my $40 skin just dissapeared into nothing but dust

Well you are in 3 scam website groups, that's where your skins went.

How would my skins disappear when i sent it to the account, it said I received it but it is not in my inventory

[The Giving One]

The good Teksura explained how the API scam works in the post above. If you want to know how it works read that, but you need to do those steps that were linked, and I have asked you twice now about the link that I posted and you keep ignoring that.

It's time to pay attention to what people are telling you, and the fact we are trying to help.

[khryder2012]

sorry, i forgot to reply about the link, there is no information that says my account is compromised on the web api key.it just says my key. i dont believe that i was trading between bots when i gave the tempered ak. i was trading between my account and when i see on this account it physically says that i recieved it and its supposed to be in my inventory, i have made sure i was trading between real accounts and the right ones. all the bots i was trading with the traddes were successful. The only trades i did were on ♥♥♥♥♥♥♥♥♥♥.com, howl.gg and rustreaper.com, im pretty sure they were all legit. the sites that M claimed i traded stufff on i did not have any trade history with them.

[khryder2012]

Originally posted by Teksura:

Originally posted by Veins:

and i checked in the trade history, it was added to my account but never recieved

I bet you it wasn't. Check the profile of the account it was sent to, that's not your account.


Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.


Do each of the steps.



What happened is your account became compromised, most likely through a third party site. This well known scam then requires you to authorize the trade giving your items away after you allow them access to your account through either malware, or giving away your details through a phishing fake login page or other trick used by those shady third party sites.

The way it does this is after it gains access to your account, a bot waits until you send out a trade offer, and then using the access you gave to them, their bot cancels the trade, changes a bot account to match the name and profile picture of the person you wanted to trade with, and then sends a trade giving your stuff away for free.

The scam depends on you ignoring all the warnings, such as "this user is not on your friends list", "this user has a similar name to someone on your friends list", their items missing from the offer, the big "you will receive nothing" text, the fact that they have the wrong level, wrong "has been on Steam since" date (usually obviously too recent to make sense), and a few other obvious warnings. It only works if you're not even looking at what you're doing. Sadly, an awful lot of people don't care enough to verify the trade is what they are expecting, so this scam continues to work.

Valve will not return items you gifted away to the scammer as a result of ignoring all the warnings. https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

I have done all the steps and says my account / pc is not compromised at all

[Veins]

this is my other account

[The Giving One]

Did you use the links with the account you just posted with, or the one you started this thread with ?

[Veins]

both accounts