Extremely Disappointed with Steam Inaction on Blatant & Repeated Thefts

[ammad4147]

Someone purchased "Autographed Pyrexaec Forge" using huge money sum of money from my steam wallet. Then the item got sold for pennies. All I got were two emails. My account is not apparently hacked. I have steam guard active as well. I reported both emails and used steam tools to raise the issue. Little scroll of steam forums indicated that same is happening with many others too. Ironically, all instances money is refunded. WHY? I just cannot believe controls could be so poor that money can be whisked away just like that and there is no support from Steam. What good is this platform to trust with money in wallet! Extremely disappointed but unfortunately stuck after buying many games.

[J4MESOX4D]

Accounts are not 'hacked' - either you gave away your credentials to a phishing site or you have something harmful on your PC. Steam Guard is just an extra security layer and it does not prevent you from becoming compromised.

Either way, this is not Steam's fault. You need to desperately work out where you went wrong and secure your account and/or device(s)

[ammad4147]

Credentials never given to anyone, no phishing site is ever visited and I keep anti virus updated at all times. I am not sure what else to do! Steam should not allow such transactions without cross confirmation. Not everyone can be expert to guard against such events. It may be something at my end but it indeed is ironic. Specially, seeing so many steam users being repeatedly ripped off.

[J4MESOX4D]

Publicado originalmente por ammad4147:

Credentials never given to anyone, no phishing site is ever visited and I keep anti virus updated at all times. I am not sure what else to do! Steam should not allow such transactions without cross confirmation. Not everyone can be expert to guard against such events. It may be something at my end but it indeed is ironic. Specially, seeing so many steam users being repeatedly ripped off.

Your Guard device could also be compromised. Either way the issue is your end whether you like it or not. The more you ignore it, the more likely it'll happen again and you will never learn.

You should do the following steps to secure your account as a matter of urgency:-

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

[Crazy Tiger]

Staying in denial won't actually serve you, OP. Account holders are responsible for account security. Nobody needs to be an expert. Guard codes aren't a magical shield, it's just one extra code to enter. When people get phished, they give out the account name, password and then active guard code. A bot quickly enters it and hijackers have access then.

Secure your account:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Find out how you leaked your credentials. Phishing and malware are the two ways it happens, phishing is the most likely one. Either way, find out how you leaked your credentials.

Items are gone, they do not get returned nor will you get money back for them. The item restoration policy: https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

[J4MESOX4D]

Also you've probably be hijacked for many months and anytime you have something worth stealing, the scammers who are sitting idle on your account the whole time are put on alert and they can then just strike with ease.

I bet you didn't secure your account the first time this occurred and instead ignored it.

[Brian9824]

Publicado originalmente por ammad4147:

Credentials never given to anyone, no phishing site is ever visited and I keep anti virus updated at all times. I am not sure what else to do! Steam should not allow such transactions without cross confirmation. Not everyone can be expert to guard against such events. It may be something at my end but it indeed is ironic. Specially, seeing so many steam users being repeatedly ripped off.

Not really ironic, steam has a billion+ accounts so of course users are going to fall for phishing scams. They also don't refund other users who fall for it, so your check of the forum sounds to be about as thorough as you securing your account.

[ammad4147]

Thanks for lecturing. I saw previous posts with similar and prompt comments pointing user mistakes. My post was rather for Steam but interestingly steam well wishers are little too quick to respond. Thanks anyway.

[J4MESOX4D]

Publicado originalmente por ammad4147:

Thanks for lecturing. I saw previous posts with similar and prompt comments pointing user mistakes. My post was rather for Steam but interestingly steam well wishers are little too quick to respond. Thanks anyway.

]There's nothing Steam can do - Valve provide all the tools and still users become compromised through their own recklessness. To date, there has not been one account 'hacked' either by brute force or a platform vulnerability.

At least now we've helped you secure your account (assuming you actually do the steps) and helped you understand how this can happen (whether you like the information or not). I'm gonna guess you were hijacked for some time and because you didn't secure your account initially, the scammers could strike anytime they wished. I would also consider resetting your mobile device if you use that or your email password if that is your choice of Guard because that is likely compromised on top.

[Brian9824]

Publicado originalmente por ammad4147:

Thanks for lecturing. I saw previous posts with similar and prompt comments pointing user mistakes. My post was rather for Steam but interestingly steam well wishers are little too quick to respond. Thanks anyway.

These are user forums, steam doesn't read or respond to these.

[wuddih]

Publicado originalmente por ammad4147:

Thanks for lecturing. I saw previous posts with similar and prompt comments pointing user mistakes. My post was rather for Steam but interestingly steam well wishers are little too quick to respond. Thanks anyway.

no one from Valve will ever read this as this is a user forum and Valves stance on someone losing items or money because they gave away someone else access to their account is clear: it is their fault.

and a wallet wipe happening clearly is the users fault. that requires malware or giving away credentials, multiple times.

[Marazipan]

https://www.eurogamer.net/valve-will-no-longer-return-items-lost-in-steam-trade-scams

[no154370]

people like OP will never admit that they lost $$$$ is due to their own FAULT.

they will keep on pushing the blame to Steam and Valve Corporation for "poor account security".

--------------------------------------------------------

which is why got threads where people keeps on asking to add

1) 3rd party 2fa

2) give away people's personal information like ID cards, passport, medical records........etc

to make the account more secure.

-----------------------------------------------------

these people who start such threads, i believe they got "scammed" of their items and $$$$$ because they don't bother to secure their own Steam Account Properly.