my account got hacked even tho they didn't have access to my gmail.

[Brainy]

can someone tell me how they access my steam without my gmail? i checked my gmail and their were no breaches or compromised but they still somehow got in my account and took all my money

[FFL2and3rocks]

By obtaining your account name, password, and authenticator code, by tricking you into using them to log into a phishing site.

[Brainy]

Publicado originalmente por FFL2and3rocks:

By obtaining your account name, password, and authenticator code, by tricking you into using them to log into a phishing site.

but i haven't used any sites relating to steam and i havent used the gmail that links with my steam for weeks now

[Neg4tiveKD]

Your guess is as good as ours then.

[Brainy]

Publicado originalmente por Neg4tiveKD:

Your guess is as good as ours then.

does steam refund? like i really want that money back... they took like 500 and i was planning on buying games for my friends ;-;

[JPMcMillen]

Publicado originalmente por Brainy:

Publicado originalmente por FFL2and3rocks:

By obtaining your account name, password, and authenticator code, by tricking you into using them to log into a phishing site.

but i haven't used any sites relating to steam and i havent used the gmail that links with my steam for weeks now

More likely... you don't think you logged into Steam through a 3rd party or phishing site, but did at some point in the past. Once someone has an API key linked to your account, they can always get back in, even years later, unless you've removed that key.

Steam accounts are all but impossible to access without the user themselves making some kind of mistake. Either by giving away their Steam account credentials or relying on email for 2FA and someone got access to their email account. Because once they get into someones email account, it's not that hard to intercept and then delete any incriminating emails.

[JPMcMillen]

Publicado originalmente por Brainy:

Publicado originalmente por Neg4tiveKD:

Your guess is as good as ours then.

does steam refund? like i really want that money back... they took like 500 and i was planning on buying games for my friends ;-;

Nope. Account security is the users responsibility. If they used their wallet funds to buy marketplace items, those transactions will not be reversed.

[Washell]

Publicado originalmente por Brainy:

Publicado originalmente por Neg4tiveKD:

Your guess is as good as ours then.

does steam refund? like i really want that money back... they took like 500 and i was planning on buying games for my friends ;-;

No, the only avenue to get your money back is for the person who stole it to be arrested and court ordered to pay your back. Given the international nature of the internet and the small amount of money involved, that's not going to happen.

[Brainy]

Publicado originalmente por JPMcMillen:

Publicado originalmente por Brainy:

but i haven't used any sites relating to steam and i havent used the gmail that links with my steam for weeks now

More likely... you don't think you logged into Steam through a 3rd party or phishing site, but did at some point in the past. Once someone has an API key linked to your account, they can always get back in, even years later, unless you've removed that key.

Steam accounts are all but impossible to access without the user themselves making some kind of mistake. Either by giving away their Steam account credentials or relying on email for 2FA and someone got access to their email account. Because once they get into someones email account, it's not that hard to intercept and then delete any incriminating emails.

how do i fix it so that my account doesnt get hacked anymore?

[JPMcMillen]

Publicado originalmente por Brainy:

Publicado originalmente por JPMcMillen:

More likely... you don't think you logged into Steam through a 3rd party or phishing site, but did at some point in the past. Once someone has an API key linked to your account, they can always get back in, even years later, unless you've removed that key.

Steam accounts are all but impossible to access without the user themselves making some kind of mistake. Either by giving away their Steam account credentials or relying on email for 2FA and someone got access to their email account. Because once they get into someones email account, it's not that hard to intercept and then delete any incriminating emails.

how do i fix it so that my account doesnt get hacked anymore?

How to secure your account if your login credentials have been compromised:

Important: Don't trade anything until you have followed all the below steps.

• Scan for malware https://www.malwarebytes.com/
  
• Deauthorize all other devices https://store.steampowered.com/twofactor/manage
  
• Change passwords from a clean computer
  
• Revoke the API key https://steamcommunity.com/dev/apikey
  
• Generate new backup codes

Also, might want to change your email account password and if possible start using 2FA for it.

[Brainy]

Publicado originalmente por JPMcMillen:

Publicado originalmente por Brainy:

how do i fix it so that my account doesnt get hacked anymore?

How to secure your account if your login credentials have been compromised:

Important: Don't trade anything until you have followed all the below steps. :Hatfall_Wizard:

• Scan for malware https://www.malwarebytes.com/
  
• Deauthorize all other devices https://store.steampowered.com/twofactor/manage
  
• Change passwords from a clean computer
  
• Revoke the API key https://steamcommunity.com/dev/apikey
  
• Generate new backup codes

Also, might want to change your email account password and if possible start using 2FA for it.

thank you!

[ReBoot]

Watch out for phishing. That's what most likely happened, that's what you need to watch out for.

[✨Saint✨]

Let me tell you something about hackers OP:

If you were hacked by a pro, you would not be able to use the internet, hackers do this so they have all the time to search for "interesting" things with the data they have collected.
In the worst case, they just lock your whole PC behind a password, or just lock it.
Hackers on this level, are not interested in Steam, they go for the "big fish", well, unless you have an inventory worth 5 or six digits.

Clicking on suspicious links and other "bait" can be dangerous as well.