Guy randomly asking me to change my password?

[SaFteiNZz]

Hello guys I got a friend invite that sent me a very peculiar message:
"if i've messaged you in the last couple days on random do yourself a favor and change your steam password, greetz".

I know its 99% a scam but I dont really understand its purpose, why would he want me to change my password, may have I leaked something he could use to use the password change to his advantage?

Again I know there're lots of scams, but I can see the purpose of those, this one not so much :/

[Bee🐝]

Nope. Obvious scam is obvious.

[Bee🐝]

Oh, check this just to be safe:

Steam API key https://steamcommunity.com/dev/apikey <- This field should always be blank

[Supafly]

Prob just a bait friend invite with a warning hoping you to bite the bait. Once you do they'll steer you towards a scam, one way or another. Block then unfriend them

[B-o-B]

From a user themselves who has no clue how they lost access to their account and is now alerting friends, since they're clueless, they suggest friends change passwords.

[Muppet among Puppets]

Maybe someone who had you on friendlist, then lost his account, scammer deleted friends and sent scam messages.

There is no harm someone can do by telling without anything else to just change your password, and thats all.

[Valeriya]

11 years on Steam and still wondering what those messages mean? The consequences of adding randoom users entails these situations, it is not new!

1. Scan for malware https://www.malwarebytes.com/
2. Deactivate all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your mobile app https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[SaFteiNZz]

Yes I understand it is a scam I don't doubt it even slighly. But is the having to change the password what was weird, because me changing my password gives he absolutly no info about my account..

So as some of you said, either he was building trust to later redirect me to a mallicious link or asking me personal info, or this serves no purpose more than making me change my password..

It was more like a intriguing thing more than a worrying thing, anyways thanks for your answer guys !

[Muppet among Puppets]

Originally posted by SaFteiNZz:

Yes I understand it is a scam I don't doubt it even slighly.

Its rather an aftermath reaction of a hijack that happened to someone than a scam.
The text you got also supports that.

No scammer would tell you if he had contacted you the day before, you should now change your password because of that. That is the opposite of creating "trust".