Someone sold my items on community market

[amarogx]

Hello, as title says I randomly got email notifications for "Your item has been sold on the community market" despite not having logged into my steam for a week or two. Apparently 50+ of my csgo cases (ranging from 1$-2$) were all sold for $0.88 on the community market instantly, crediting my account money, then instantly 26 Dota 2 items were purchased, draining my account of the money credited.

I received no sign in notification, I have steam guard enabled, have a phone number linked, and mobile authentication, I have not clicked any links or installed or signed into anything sketchy lately and am extremely confused and worried about what happened and how my account was accessed. Please advise.

[Lilim]

Your account is compromised.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Steam does not return inventory items or wallet funds: https://support.steampowered.com/kb_article.php?ref=3415-WAFH-6433#noreturn

Community Market FAQ lähetti viestin:

How can I reverse or cancel a completed Community Market transaction and/or get a refund?

All purchases are final – you will not have any right to a refund or a reversal of any Community Market transaction once it is completed.

Report the account that sold the overpriced item(s).

[amarogx]

Did all those steps earlier, saw them on another forum, I just dont understand how someone was able to do this without logging in, I wasnt even logged into this computer.

[J4MESOX4D]

amarogx lähetti viestin:

I have not clicked any links or installed or signed into anything sketchy lately

Ah so you have done previous. Hijackers will not strike straight away and will only take action when there's a payoff to be had. If you give away your credentials to a 'sketchy' site then these can be captured and login-botted into a client instantly without your knowledge. Scammers can then sit idle waiting for the best possible time to strike. They will wait as long as it takes and this is also a good tactic to disguise the origin. Items listed for less than $1 don't require confirmation and they can then do quick-launders without any confirmation required through their own tailored buy orders.

So to recap, you gave away your credentials, got hijacked without your knowledge, scammers laid in wait, struck and now you know the importance of not using scam sites.

[Unn4m3d (♥AUT♥)]

amarogx lähetti viestin:

or signed into anything sketchy lately

But you did at some point, that's all they needed. They can wait a long time before striking.

[nfnp]

unsure,.

[Rizzla+]

Same thing happened to me? I changed my shift at work so had no time to play for a few weeks. signed on yesterday to see that all my skins were sold for 61p each and then a ton of the same thing were purchased? I spent a lot of money on Rust skins to have them stolen! I contacted steam to ask why i did not get any notification or warning that they were being sold,and steam basically told me "Tough luck,we are not going to do anything to help you? I have never visited any other trading site or malicious site regarding steam or skins so how has this happened. In reality this is theft and Steam are doing nothing about it. Absolutely furious that Steam are OK Taking your money,but completely ignore you when you need support. I will be seeking advice as to the legality and lack of promised support from Steam. Disgusting way to treat a 12 year steam user that has NEVER had any ban,problem or issue before!

[J4MESOX4D]

Rizzla+ lähetti viestin:

Same thing happened to me? I changed my shift at work so had no time to play for a few weeks. signed on yesterday to see that all my skins were sold for 61p each and then a ton of the same thing were purchased? I spent a lot of money on Rust skins to have them stolen! I contacted steam to ask why i did not get any notification or warning that they were being sold,and steam basically told me "Tough luck,we are not going to do anything to help you? I have never visited any other trading site or malicious site regarding steam or skins so how has this happened. In reality this is theft and Steam are doing nothing about it. Absolutely furious that Steam are OK Taking your money,but completely ignore you when you need support. I will be seeking advice as to the legality and lack of promised support from Steam. Disgusting way to treat a 12 year steam user that has NEVER had any ban,problem or issue before!

Scammed items are not returned as per the policy. Account age is also meaningless as every user is treated the same. The only way to enter a Steam account and perform such actions is with 3 credentials including a live auth code so you would've had to have leaked your information previous whether you realise or not or you have tailored malware on your device(s)

It is a technical impossibility otherwise for this to happen which is why incompetence is not compensated.

[Rizzla+]

If incompetence is not using my account for over three weeks,NEVER using any other site to trade,sell or swap skins and having extra security on my devise is what you mean....then yeah. incompetence is when someone else is able to get into my locked account,steal my ♥♥♥♥ and sell it,then add about twenty 10p skins to my account,and take the money they then received from selling my items. That incompetence falls with Steam for having ♥♥♥♥ security that is obviously breached easily,and more so,having a no fks given attitude when a time served user has an issue that is obviously out of there control! Its almost like Steam are siding with the thief (Because that's what they are) because Steam do not want to fix an issue. They are more than happy for me to spend a LOT of money on items,games. They are more than happy to inform me of the security they have,they are more than happy to not give a ♥♥♥♥. And the user is left out of pocket and with a feeling of distrust for a platform they we as users help to pay the wages of the Steam devs,workers and directors!!! Utter Bulsht. How would they like it if suddenly I decided to purchase games on release day,play them for under two hours and demand a refund under the refund rules they set out. How about I do that five times a week and see how they like that ffs. Steam 1,users 0.

[Vakers]

Rizzla+ lähetti viestin:

IUtter Bulsht. How would they like it if suddenly I decided to purchase games on release day,play them for under two hours and demand a refund under the refund rules they set out. How about I do that five times a week and see how they like that ffs. Steam 1,users 0.

Great idea, you should definitely do that. See how quickly they ban you from using the refund feature.

At some point you gave away your account credentials, that's all there is to it.

[Rizzla+]

Why would I get banned for using the refund feature? Isn't that there for a reason. I have not shared my details with anyone as I am not a little kid that visits dodgy sites for skins or anything else. I have three levels of security on my device,security I pay a lot of money for. I have NEVER had an issue with the security of my device...EVER. This is simply a steam issue and they cannot be bothered to rectify it. But hey. Do you read what you type before clicking post at all? Or are you a Steam employee? I know you may find it hard to believe,but there are honest people in this little world,and when they get ripped off they get frustrated that the platform they have used for years,never had an issue with,will do nothing to help! I love Steam,but they need to look at the wider issue and stop using the "visiting dodgy sites" as a reason to do nothing for a genuine user. smh!

[J4MESOX4D]

[/quote]

Rizzla+ lähetti viestin:

If incompetence is not using my account for over three weeks,NEVER using any other site to trade,sell or swap skins and having extra security on my devise is what you mean....then yeah. incompetence is when someone else is able to get into my locked account,steal my ♥♥♥♥ and sell it,then add about twenty 10p skins to my account,and take the money they then received from selling my items. That incompetence falls with Steam for having ♥♥♥♥ security that is obviously breached easily,and more so,having a no fks given attitude when a time served user has an issue that is obviously out of there control! Its almost like Steam are siding with the thief (Because that's what they are) because Steam do not want to fix an issue. They are more than happy for me to spend a LOT of money on items,games. They are more than happy to inform me of the security they have,they are more than happy to not give a ♥♥♥♥. And the user is left out of pocket and with a feeling of distrust for a platform they we as users help to pay the wages of the Steam devs,workers and directors!!! Utter Bulsht. How would they like it if suddenly I decided to purchase games on release day,play them for under two hours and demand a refund under the refund rules they set out. How about I do that five times a week and see how they like that ffs. Steam 1,users 0.

They can only get into your account with the 3 credentials including a live auth code so you had to have leaked your credentials somewhere previous. This is unarguable. 'extra security' is also pointless if you allow such things to be phished just like if you give away your alarm code to a thief.

Policy is quite clear https://help.steampowered.com/en/faqs/view/3B6E-B322-2400-8D24 and your case is very common. Thankfully most users in those know or admit where they went wrong and can then secure their account going forward so it doesn't happen again. If you don't this then it'll just happen again and keep on happening and you're probably still shadow-hijacked as we speak.

Steam do not compensate careless users especially those who cannot fathom what's going on or how to secure a basic Steam account. Their are children in developing countries on this platform who don't have this issue.

[Rizzla+]

I understand the policy. I understand the Steam statement on the rules and regulations of trading and I understand that I have or would never share my login with anyone because of the risk of such things happening. With that said you are still trying to assume that I have? I had NO notification on my device or connected mobile device asking to either confirm or reject any actions. I had no steam guard notification regarding the same! I have and will never visit any site outside of Steam to buy,sell or trade anything that belongs to me because I am not an idiot! So with those facts firmly in your mind and with my own knowledge that I ONLY USE STEAM to do as mentioned above.....How have I been a victim of theft within a platform i solely use for the above mentioned activity??? Please explain because I think you believe that if you continually accuse me of sharing my details or visiting any other site other than Steam then it must be so.....I cant seem to grasp why this is my error!!! If Steam could be bothered to make the effort of looking into my account and the transactions,they would see that items purchased AFTER the fact are items i have no interest in or have never been interested in. They would also see that items sold were sold at a threshold price to counter the need of authentication (which is on its own an invitation to thief's). I have done nothing wrong other than not use my account for a while due to work commitments,I have NOT given my details to ANYONE and I do not frequent "dodgy sites". So again,with that in mind,how did this happen. And more importantly,why are Steam not even the slightest bit bothered? In a reply from Steam regarding my first contact about this,they said "we cannot or will not contact the buyers of your (stolen) items because that would not be fair??? But they think it is fair for me to take a loss because they can use the "you must have leaked your id,or you have malware"? So basically passing the blame onto me,rather than simply looking at the transactions and instantly know it for what it is....a thief,breaking Steam security and running away laughing at them? Perhaps Steam has had "another" privacy breach! Either way I will have to take the loss,never buy skins or games from Steam again (There are other platforms) and get on with it? Enjoy your day. I am done with this. I am not even that angry i lost my items,I am angry at the lack of respect/support from a world leading platform.

[Vakers]

Rizzla+ lähetti viestin:

Why would I get banned for using the refund feature? Isn't that there for a reason. I have not shared my details with anyone as I am not a little kid that visits dodgy sites for skins or anything else. I have three levels of security on my device,security I pay a lot of money for. I have NEVER had an issue with the security of my device...EVER. This is simply a steam issue and they cannot be bothered to rectify it. But hey. Do you read what you type before clicking post at all? Or are you a Steam employee? I know you may find it hard to believe,but there are honest people in this little world,and when they get ripped off they get frustrated that the platform they have used for years,never had an issue with,will do nothing to help! I love Steam,but they need to look at the wider issue and stop using the "visiting dodgy sites" as a reason to do nothing for a genuine user. smh!

Steam can revoke your ability to use the refund feature if they think you're abusing it, yes. So go ahead and buy and refund a bunch of games every week, they'll take away your ability to do that completely.

[Rizzla+]

And why would that be an issue for me? I think in my thirteen years as a Steam user I have only ever refunded 1 game? I have sold and purchased a lot of items,I have NEVER had a ban,issue within Steam. But hey,you seem to be very passionate about Steam,with your private profile,keep going on/off line....Perhaps you are an employee of Steam? Because Steam seem to be ignoring my requests for help and playing the blame game,actually nearly word for word as you have been saying? My point is the lack of support and blaming a user rather than investigate.....Realy bad customer service in my opinion. I will never purchase from Steam again,as I said,there are other platforms to game from. Enjoy the rest of your day and I hope you never have this happen to you. I am off to eat the sushi that has been sat here while i have been wasting my time. Lesson learnt.

[J4MESOX4D]

Rizzla+ lähetti viestin:

I had NO notification on my device or connected mobile device asking to either confirm or reject any actions.

I already answered this. It's possible you were hijacked for some considerable time that pre-dated login notifications and the scammers used tailored buy orders and sales under $1 which required no confirmation. Scammers will sit idle on accounts for as long as it takes until a payoff can be had. If this is the case then you would receive ZERO notifications of a login or listing. The idea as it always has been is not to compromise your credentials which you clearly did.

Many scam victims in recent months are only just finding out they have been hijacked for up to and beyond 2+ years because they are being targeted by scammers who have been idle-sitting on botted phished logins and using their API keys to determine when to strike against users. It's harder to hijack users now because of the new(ish) Guard confirmation (one button) page on mobiles but anyone prior who simply allowed their credentials to be phished had no safety net and you are likely one of them.