gifts were sent with my account without my knowledge. need advise please

[Regular jackoff]

Hello,

4 days ago i noticed CS: global offensive sitting in my gift inventory.. which i thought was strange but i figured it might have come for free in some action or something. but the day after i noticed 7 gift purchases on my online-bank access thing! after finding the very well hidden 'gift history menu' i found out who redeemed 6 of the 7 gifts, on the same day they were purchased from my account. (CS:GO was bought 2 times so i guess thats why 1 was left behind in my inventory)

the guy has multiple comments on his profile stating 'he is a good trader' so i suspect he's doing this for profit and i'ts likely he has done this before.. he also had a VAC ban in the past. not sure if that is relevant

i made a steam support ticket 3 days ago (incl. attachments with proof) but the response is taking a long time for something i consider quite urgent.. so my questions to you are,

1, is there a way to contact steam in an emergency? i want my bank information unlinked from my account ASAP!

2, my password was unchanged. i changed everything after i discovered this but still.. how is this possible? one would expect my password and email would have been changed if my account was hacked right?

doesn't this mean there is a security problem with steam? my password isn't exactly easy to guess.. i scanned my pc with anti malware and anti virus software, a few issues were found but no trojans / keyloggers i think

3, what can steam do about this? i lost 150-200€, can this be refunded and the gift items removed? can they prove he did this with my account and ban that Penis so it doesn't happen again?

i hope the people from Steam support read the ticket soon, i'm worried sick about people apparently being able to deplete my bank account with no guarantee i'll get it back.

thanks for your time and help

Vincent


edit; worth mentioning, i also recieved 7confirmation emails about the purchases, but no other emails like pasw. change emails and such.. the guy is also in my friends list somehow but i can't recall adding him.. i keep a tight friends list, only have 8 people in there

[Silicon Vampire]

it's likely you were phished and allowed an upload of a file to the fake website, which bypassed SteamGuard. You will have to wait for support to help you as we can not do anything about it on these forums.

[Regular jackoff]

thank you silicon.

i know no-one on this forum can do something about this. but since all relevant search results on google involved changed log-in data i thought it was worth posting here as well.

i allowed an upload of a file to a fake website? i'm not in the habit of opening unknown mails or links if that is what you mean..

thank you for your response

[TirithRR]

Originally posted by vincent.dk9:

i allowed an upload of a file to a fake website? i'm not in the habit of opening unknown mails or links if that is what you mean..

The way it goes down is like this:

Someone wants to trade with you, so they send you a friend invite.
They then say that their friend wants to trade for one of your items, but can't add you because of a Steam error, and gives you a link to their profile so you can add them.
That link is a fake link, designed exactly like the Steam Community login page, but usually a mispelled URL (hidden because it looks the same).
You "log in" to that community page to add the user, and it asks you to download "SteamGuard" or "SteamVerify" or something similar (which is a virus). Or it asks you to verify your computer manually by uploading an SSFN file from your Steam folder.
This is a fake step, designed to steal your Steam Guard authentication so they can gain access to your account without having to verify through Steam Guard.

[Regular jackoff]

thanks for the clarification tirithRR. i'm 100% sure that didn't happen to me tho.. i decline friend requests if i haven't gamed with the request sender.. i also never traded a single thing on steam.. i'm only steam lvl1..

[TirithRR]

There are other phishing methods, that is just the most common, and sometime it can come from outside of Steam (if you happen to use the same password on multiple accounts, etc.)

Someone has access to your account that is not you. It could even be a family member getting onto your computer. Etc.

[76561198127324768]

a mi me paso exactamente lo mismo que vos vincent, pero con items de dota 2 me robaron todo lo que tenia, pero bueno nadie puede hacer nada, el usurario me robo de una cuenta smurf, parece que se dedica a hacer eso, y hable con el supporte y nada, no te ayudan en nada, asi que realmente el suporte es una perdida de tiempo.

[Regular jackoff]

okay. i live alone so my account was definitely not accessed from my pc. i did turn on the 'disable access from other computers' thing tho.. i hope that helps..

guess i'll have to wait and see what steam support sais about this..

thanks

[Regular jackoff]

it's a desktop, i only game at home. the account that redeemed the gifts is from venezuela.. i'm in europe.

Ines.Nash, thanks. google translate really f*cked up but i kind off understood what you are saying. the fact that steam support did nothing at all for you frustrates me.

so steam has a fault in it's system that allows stamguard to be bypassed, steam keeps my bank data linked to my account and i can't unlink it myself, i can't ask steam to unlink it for me, been waiting for days while someone has access to the money i worked for..

i understand the support section gets flooded with tickets but there defenitly should be some kind of priority system here because this is absolutely ♥♥♥♥♥♥

iNes, good luck trying to get your problem solved. buena suerte.

[Silicon Vampire]

The only fault in Steam security is the one between the keyboard and chair. You can not stop someone from making bad decisions or make them pay attention to what they are doing...

[Regular jackoff]

that's amazingly helpfull..

i'm not attacking steam here.. don't get me wrong.

but my online banking service provider has never been hacked. because they make it impossible or at least incredably hard for people with bad intentions to do these things in the first place.. if steam security can be bypassed just like that, especially considering people have their payment information on it.. that's a problem. last time i bought anything on steam.

no need to defend your employer, but i understand where you are coming from.

seriously you guys should consider an option to remove bank data from the steam servers. i no longer give steam my consent to have this information and i want it off the servers now, not 'when steam support gets to it' or 'if'

[TirithRR]

Go to your account settings and delete your saved payment information yourself...

Here's the link if you don't know where it is:
https://store.steampowered.com/account/
You can also view all your past transactions on the Store and other areas on Steam from that page, including these transactions if they were made on your account and not someone elses.

[Regular jackoff]

thank you man.

i've been searching on that page before, all i get is this

--
The following payment methods are currently associated with your account.

Credit Card Add
--

credit card is greyed out, i can't click it. i can only add more payment methods. i must be missing something?


screenshot, including my entire purchase history

http://nl.tinypic.com/r/2w20sjp/8

[TirithRR]

Then you must not have any stored credit cards on your account. I don't check the "remember payment info" on the checkout, I always type it in fresh each time rather than let Steam remember it on my account. I got burned once when I was younger on Xbox Live and someone bought 40 dollars worth of points (never spent them, they were on my account still) Since then I never allowed any site remember payment info (except MMOs that requried reoccurring payment methods).

Are those gifts on the 30th all the bad purchases?

[Regular jackoff]

that's smart. i wish i wasn't so lazy and did the same.. rarely buy on steam anyways. i purchased Rust alpha on the 24th, and didn't have to do anything. i confirmed and it just went off my bank account so i'm pretty sure purchases can still be made by my account without ID verification, exept for steam login.

and yes, all the ones dated 30 juli are not done by me. 1 copy of CS:GO is still in my inventory but i don't want it :/

[TirithRR]

Well, if you haven't already, you'll want to do this:
https://support.steampowered.com/kb_article.php?ref=1223-qroc-4460
https://support.steampowered.com/newticket.php

It may take a while, but keep it short and simple and you should be able to get it worked out with Steam.

And make sure you keep it short, a long drawn out ticket leads to nothing but confusion and it takes longer to get it worked out.

Something simple like:
On July 30, 2014 there were 7 gift purchases made using my account that I did not authorize. Please help me correct this.

Make sure to include your account name in the ticket as well. Then wait for the response and provide any info they may require.