Install Steam
login
|
language
简体中文 (Simplified Chinese)
繁體中文 (Traditional Chinese)
日本語 (Japanese)
한국어 (Korean)
ไทย (Thai)
Български (Bulgarian)
Čeština (Czech)
Dansk (Danish)
Deutsch (German)
Español - España (Spanish - Spain)
Español - Latinoamérica (Spanish - Latin America)
Ελληνικά (Greek)
Français (French)
Italiano (Italian)
Bahasa Indonesia (Indonesian)
Magyar (Hungarian)
Nederlands (Dutch)
Norsk (Norwegian)
Polski (Polish)
Português (Portuguese - Portugal)
Português - Brasil (Portuguese - Brazil)
Română (Romanian)
Русский (Russian)
Suomi (Finnish)
Svenska (Swedish)
Türkçe (Turkish)
Tiếng Việt (Vietnamese)
Українська (Ukrainian)
Report a translation problem
https://support.steampowered.com/kb_article.php?ref=2347-qdfn-4366
When your friend get his account back, he need to do these steps.
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)
Also if your friend block Steam, filter out by the mailing service, made a rule to auto delete, or in the spam folder, then he need to check that, if not anywhere in there, nor blocked, or deleted, then chances the hijacker also have access to his email as well.
My question is, how should my friend contact support? He doesn't have access to the email address of the account he is trying to recover. He doesn't even know what its new email address is. The same thing with the associated phone number.
Is it fine to use a different Steam account to recover another account? Or is there a different way altogether to get support in this difficult case?
No you don't need to make new Steam account. Please send him what I posted from the start, he needs to do this himself, as only the account owner can recover the account, as support will be asking proof of ownership, hence what I posted in the link above.
Perhaps someone just deleted the mails you should not see.
Accounts > Email > User being weakest link, and always will be as all need is user to make the mistake such as not enable 2FA/MFA/U2F, or FIDO for account & email, or downloading virus on their device, or just falling for scammer scam in DMs. Only option be left for scammers is brute force which they might as well find a new job as be long time they ever figure it, and easily taken back from them by contacting support.