Steam Service Assistant

[ᜌᜏᜃ]

Hi,

I've been on Steam for a while now and I recently found that a user named Service Assistant with the Steam logo in my Friends tab.

I have unfriended this User around 3 times at least and it keeps popping up in my Friends again.

Does anyone know if its an official Steam Assistant or just a regular Steam user for phishing and scams?

Thank you for the assistance if any.

I have photos of this account but I can't seem to post any.

[FFL2and3rocks]

It's a phishing scam. There is no such thing as a Steam Assistant.
Your account is already compromised if he's managing to add himself back to your friends list without your input.

[Yasahi]

There's no official "Steam Assistants" that would show up in your friends. It's a compromised account used for scamming and if you're unable to get rid of it your own account is compromised.

The following steps are commonly recommended to secure your account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

And whatever you do, don't trade.

[ᜌᜏᜃ]

Originally posted by Yasahi:

There's no official "Steam Assistants" that would show up in your friends. It's a compromised account used for scamming and if you're unable to get rid of it your own account is compromised.

The following steps are commonly recommended to secure your account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

And whatever you do, don't trade.

Thanks a lot! I'll be doing just what you advised me to do. Apparently there is an API Key displayed in the link you gave me. Should I just revoke that one? Its under "localhost".

[ReBoot]

Revoke ASAP!

[Teksura]

There shouldn't be anything there. An API key is literally a key to access your account. That's how your compromised account keeps adding the scammer's account as a friend.

[Steve]

This thread was quite old before the recent post, so we're locking it to prevent confusion.