hacked account vs. steam market lockdown vs. stolen credit cards

[General Noob]

So here it goes, epic story:

End of january, my Steam account got hacked. The hacker tried to buy DOTA2 items with most likely stolen credit cards. After a few credit cards, he found one that worked (As I can see in my market history). Lucky me, I was logged in and noticed, that something weird is happening. So I told steam, that my account is hacked. Took them 2 weeks to unlock my account, but hey, we all know how slow the steam support is... so nothing special here.

But now it comes ^^
Obviously, the owner of the stolen credit card realized (luckily) that his credit card was stolen and canceled all transactions. Fun part is, since the hacker managed to buy some steam items, which I did not realize, I sold them on the market and made some money with it. With this money, I bought some games (obviously).

Now I get a message from steam today, that my account is kind of limited for the next 9 weeks (!), except for when I cancel the cancellation on the stolen credit card, which I do obviously not own.

If i want to balance the negative amount of my steam wallet by buing steam credits, it tells me that I cannot do that, because I am not allowed to do any market transactions.

Now how nice is that? :D

I cannot cancel the cancellation of the credit card that is not mine, plus I cannot add steam credits at all.

So I create a ticket on steam regarding this and what does Steam tell me imediately: "* The Steam Support Team can not remove limitations on your account that affect the actions or the use of the Community market. *"

haha... hahahahaha... :(

So dear steam, is the account security provided by you or do I have to take care of the account security on steam? i am getting confused here.

endless punishment because of my account getting hacked... nice!
at this point, I would love to just give away my steam account with 200+ titles, because it's not worth the troubles having a steam account.

[ KARR™]

So you admit you knew that stolen money/items were/was on your account, so you decided to use it to purchase things for yourself?

That's a big thing to admit to!

You need to go back to the support team and tell them what happened and what you did and try to work it out with them. The fact you knowingly did it will have some impact on it, but at the end of the day they are the only people who can help you in the matter.

[The End]

Ursprünglich geschrieben von Ein Satz mit X:

So dear steam, is the account security provided by you or do I have to take care of the account security on steam? i am getting confused here.

endless punishment because of my account getting hacked... nice!

It sucks, and I feel sorry for you, but that is not changing that it is in no way Valves fault that your account was compromised.

Your account was not hacked, you probably downloaded some malware, clicked a bad link or visited a phisingsite.

Your account security is your responsibility.

Here is a little about steam security.
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

[General Noob]

nope, I did not realize that the items that are in my account where stolen. I own around 150+ items and no message about any new items in my inventory, but since I did not check my items in a while, I did not realize that they where new.

but yeah, would be a funny thing if i did that ^^ but then it would be my fault. and I would have to shut the fck up.

still, i wonder how they will solve the issue as they clearly say "The Steam Support Team can not remove limitations on your account that affect the actions or the use of the Community market."

[General Noob]

Ursprünglich geschrieben von Rockon:

Ursprünglich geschrieben von Ein Satz mit X:

So dear steam, is the account security provided by you or do I have to take care of the account security on steam? i am getting confused here.

endless punishment because of my account getting hacked... nice!

It sucks, and I feel sorry for you, but that is not changing that it is in no way Valves fault that your account was compromised.

Your account was not hacked, you probably downloaded some malware, clicked a bad link or visited a phisingsite.

Your account security is your responsibility.

Here is a little about steam security.
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

So then, Kaspersky and 2 Firewalls failed to do their job...

[The End]

Ursprünglich geschrieben von Ein Satz mit X:

but then it would be my fault. and I would have to shut the fck up.

It IS your fault, that is the fact.

[General Noob]

Ursprünglich geschrieben von Rockon:

Ursprünglich geschrieben von Ein Satz mit X:

So dear steam, is the account security provided by you or do I have to take care of the account security on steam? i am getting confused here.

endless punishment because of my account getting hacked... nice!

It sucks, and I feel sorry for you, but that is not changing that it is in no way Valves fault that your account was compromised.

Your account was not hacked, you probably downloaded some malware, clicked a bad link or visited a phisingsite.

Your account security is your responsibility.

Here is a little about steam security.
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

So then, Kaspersky and 2 Firewalls failed to do their job...

[The End]

Ursprünglich geschrieben von Ein Satz mit X:

Ursprünglich geschrieben von Rockon:

It sucks, and I feel sorry for you, but that is not changing that it is in no way Valves fault that your account was compromised.

Your account was not hacked, you probably downloaded some malware, clicked a bad link or visited a phisingsite.

Your account security is your responsibility.

Here is a little about steam security.
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

So then, Kaspersky and 2 Firewalls failed to do their job...

You failed, that is the core of the problem, you have done something that compromised your account, that is a fact.

No matter what antivirus or firewall you have, you still need to take care and be cautious.

[General Noob]

Ursprünglich geschrieben von Rockon:

Ursprünglich geschrieben von Ein Satz mit X:

but then it would be my fault. and I would have to shut the fck up.

It IS your fault, that is the fact.

But it's ok for steam not to realize that 2 IP's from 2 different countries where logged in, a few credit cards have been tried to add. After telling them, that my account got hacked, they do no check at all if everything is ok or if there has been some weird transactions going on?

Seems to me more like steam would just be interested in the money they earned with the stolen credit card.

It's simple to say that it is only my fault.

and again, I have my security measures on my side, as written above.

also, I was referring to the items that where in my inventory, not about the fact that I got hacked. This might be my fault, even though I have no clue how it happened.

ps: working since 15 years in IT, so I'm not really a noobie when it comes to phishing and security

[76561198218426745]

Steam does not limit how many computers you can use with your account, so different IPs do not inherently mean anything. However most attacks of this nature remotely control your PC, so Steam only ever sees your IP. Steam also does not prevent you from using more than one credit card on an account, so that too does not inherently send up red flags.

[General Noob]

Ursprünglich geschrieben von habitualaction:

Steam does not limit how many computers you can use with your account, so different IPs do not inherently mean anything. However most attacks of this nature remotely control your PC, so Steam only ever sees your IP. Steam also does not prevent you from using more than one credit card on an account, so that too does not inherently send up red flags.

true, but I am pretty sure that the hacker was not from the same country as I live in. And it should not be a big deal to figure out where an IP is located.
Regarding the remote access to my pc; as mentioned already, I have two firewalls in place, a hardware one and a software one, so my respect to the hacker if he was able to get through both of them.
Anyways, reported it to the police a while ago, which is now looking into it.

I am not even too mad about that I got hacked, but if you read carefully, you realize that steam wants me to do things that are impossible, while they at the meantime say, it's impossible for them to do anything, upfront. I will see what the support says, probably in a few days.

Also, my opinion regarding being hacked is, that hacking is like a break-in. So you cannot say that it's the house owner's fault that somebody broke in. But in this case, it becomes my fault.

Also, I have to use steam, because of DRM. Of course, there are a few alternatives, like GOG, but you cannot get all the games there. So I am kind of bound to steam. the 3000$ i spent on this account are worth nothing? I mean, I bought them with my own money. It would maybe be ok, if I would be banned from only the games I got because of this whole story, but now I have tons of games I cannot play in multiplayer anymore.

[General Noob]

Ursprünglich geschrieben von Rockon:

Ursprünglich geschrieben von Ein Satz mit X:

So dear steam, is the account security provided by you or do I have to take care of the account security on steam? i am getting confused here.

endless punishment because of my account getting hacked... nice!

It sucks, and I feel sorry for you, but that is not changing that it is in no way Valves fault that your account was compromised.

Your account was not hacked, you probably downloaded some malware, clicked a bad link or visited a phisingsite.

Your account security is your responsibility.

Here is a little about steam security.
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

by the way, totally agree with that. but being hacked isn't really the issue. More the consequences I have to deal with now.

Since this is a known issue on steam, that accounts get hacked (a reason why they added so many security layers) I would appreciate, if there would be some sort of checkup they do with your account, after this happened. Or at least have a list for the customer to do it himself.

[76561198218426745]

Steam incurs fees when a charge back is done. These fees can be significant, well beyond the amount that was charged back. If Steam incurs too many charge backs, they can face restrictions that prevent them from doing business. Steam cannot simply ignore a charge back, and while the card may not have been yours, the card that did the charge back was used in conjunction with your account.

Steam is not stopping you from playing the games you paid for, only from future purchasing and optional features like the community market. Your account was compromised once, and it resulted in a huge amount of trouble for Steam. You can't blame them for not wanting to let you purchase any more, they have no way of knowing if this will happen again.

Also, my opinion regarding being hacked is, that hacking is like a break-in. So you cannot say that it's the house owner's fault that somebody broke in. But in this case, it becomes my fault.

In both hacking and a break-in, the fault lies with the criminal. However, you agreed when you signed up for Steam that:

Any use of your Account with your login and/or password is deemed made by you and you are responsible for it and for the security of your computer system. Valve is not responsible for the use of your password and Account or for all of the communication and activity on Steam that results from use of your login name and password.

All you can do is wait for Steam to respond, but the best case scenario is likely to be that Steam requires you to pay back the money and the fees they incurred. The worse case scenario is that your account will remain suspended, and you will have to create a new account for future purchasing.

[The End]

Ursprünglich geschrieben von Ein Satz mit X:

Ursprünglich geschrieben von Rockon:

It sucks, and I feel sorry for you, but that is not changing that it is in no way Valves fault that your account was compromised.

Your account was not hacked, you probably downloaded some malware, clicked a bad link or visited a phisingsite.

Your account security is your responsibility.

Here is a little about steam security.
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

by the way, totally agree with that. but being hacked isn't really the issue. More the consequences I have to deal with now.

Since this is a known issue on steam, that accounts get hacked (a reason why they added so many security layers) I would appreciate, if there would be some sort of checkup they do with your account, after this happened. Or at least have a list for the customer to do it himself.

Only advise I can give, is try to work it out with support, explain it as precise you can, and give them all the proof you might have.

I do hope you get it solved.

Good luck.

[General Noob]

Ursprünglich geschrieben von habitualaction:

Steam is not stopping you from playing the games you paid for, only from future purchasing and optional features like the community market. Your account was compromised once, and it resulted in a huge amount of trouble for Steam. You can't blame them for not wanting to let you purchase any more, they have no way of knowing if this will happen again.

sadly, steam says otherwise: Buying, gifting, trading, key activation and playing on VAC-secured servers, access to the steam community have been deactivated.

but yes, no other option then waiting for steam support...

lucky me, Factorio needs no VAC :)

[76561198218426745]

Steam doesn't say otherwise. Buying, gifting, and key activations are purchases. Trading and the community market are optional features. You can also play your online games, just not on VAC-enabled servers.