FrEaKyFaBs Nov 29, 2023 @ 9:42am
Steam Wallet stolen
I received an email around 5:58 p.m. saying that I paid €319.67 for an item on the market. I'm a bit taken aback because it's an item that's only worth €0.03. The whole thing was debited from my wallet. I first checked to see if someone had logged in with my account and bought the stuff directly from my account... but this isn't the case. Now I have the problem that €319.67 is missing from my wallet and I have an item worth €0.03 in my inventory that I didn't even buy. Has anyone had this before and how can it be that even the “2FA” doesn’t work or protect you.
I would be happy if a supporter from the community would comment on the incident here. I informed support, but received no response via email.
< >
Showing 1-12 of 12 comments
J4MESOX4D Nov 29, 2023 @ 9:43am 
You leaked your credentials somewhere along the lines previous. The scammer then sat idle and set up a curated buy order to transfer a low value item in return for all your wallet funds minus the cut. This action would not require 2FA confirmation.

Do the below steps to secure your account as a matter of urgency:-

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Steam does not return inventory items or wallet funds: https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

Make sure you report the recipient.
FrEaKyFaBs Nov 29, 2023 @ 9:53am 
"Steam does not return inventory items or wallet funds" Why does Steam Support return the credit/wallet and block the user (hacker)? I don't understand Steam's support policy at all... Why shouldn't I get my money back? After all, it's my money!
Longy999 Nov 29, 2023 @ 9:56am 
Originally posted by FrEaKyFabii:
"Steam does not return inventory items or wallet funds" Why does Steam Support return the credit/wallet and block the user (hacker)? I don't understand Steam's support policy at all... Why shouldn't I get my money back? After all, it's my money!

Because you leaked your credentials, why would Steam refund you for something that's your own fault?
J4MESOX4D Nov 29, 2023 @ 9:59am 
Originally posted by FrEaKyFabii:
"Steam does not return inventory items or wallet funds" Why does Steam Support return the credit/wallet and block the user (hacker)? I don't understand Steam's support policy at all... Why shouldn't I get my money back? After all, it's my money!
Incompetence is not compensated. This is why it's essential to protect your account and not give away your credentials to malicious sites or tailored malware.
FrEaKyFaBs Nov 29, 2023 @ 10:00am 
Originally posted by Longy999:
Originally posted by FrEaKyFabii:
"Steam does not return inventory items or wallet funds" Why does Steam Support return the credit/wallet and block the user (hacker)? I don't understand Steam's support policy at all... Why shouldn't I get my money back? After all, it's my money!

Because you leaked your credentials, why would Steam refund you for something that's your own fault?

How do you know whether I have passed on my access data? If you don't have anything to report then just be quiet
J4MESOX4D Nov 29, 2023 @ 10:01am 
Originally posted by FrEaKyFabii:
Originally posted by Longy999:

Because you leaked your credentials, why would Steam refund you for something that's your own fault?

How do you know whether I have passed on my access data? If you don't have anything to report then just be quiet
Because you were compromised. It's either that or you did it yourself. Either way, the outcome is the same. This type of scam is ancient and seen a million times before.
Longy999 Nov 29, 2023 @ 10:02am 
Originally posted by FrEaKyFabii:
Originally posted by Longy999:

Because you leaked your credentials, why would Steam refund you for something that's your own fault?

How do you know whether I have passed on my access data? If you don't have anything to report then just be quiet

Because no Steam account has ever been hacked into, that's why. Like it or not you leaked your info, it's completely on you and Steam isn't obligated to lose out of their own pockets because of your lapses in security

Also, public forum, I'll post what and where I want little buddy
FrEaKyFaBs Nov 29, 2023 @ 10:05am 
Originally posted by J4MESOX4D:
Originally posted by FrEaKyFabii:

How do you know whether I have passed on my access data? If you don't have anything to report then just be quiet
Because you were compromised. It's either that or you did it yourself. Either way, the outcome is the same. This type of scam is ancient and seen a million times before.
That may be true... but how can it be that I received a 2FA message despite the API not being passed on? Then it can only be an extreme security gap on Steam's part.
J4MESOX4D Nov 29, 2023 @ 10:11am 
Originally posted by FrEaKyFabii:
Originally posted by J4MESOX4D:
Because you were compromised. It's either that or you did it yourself. Either way, the outcome is the same. This type of scam is ancient and seen a million times before.
That may be true... but how can it be that I received a 2FA message despite the API not being passed on? Then it can only be an extreme security gap on Steam's part.
There is no gaps in Steam security - only user misconceptions, misunderstanding or negligence. This scam is painfully common and relies on the user being shadow-hijacked - sometimes for years previous and the hijackers on botted alert until when there is a payoff to be had and then they strike. They can then quickly curate a buy order to launder a cheap item in return for your wallet funds and then they can sell the account loaded with money.

Somewhere along the lines you allowed your credentials to be phished so you should focus on how that happened. It is currently a technical impossibility for Steam accounts to be 'hacked' as it always has and the only way to get into one is with 3 credentials.
Last edited by J4MESOX4D; Nov 29, 2023 @ 10:11am
Longy999 Nov 29, 2023 @ 10:13am 
3
Aaahhh, little fella tried to add me and then said Jew on one of my video's when I declined, what a loser

Enjoy the missing money little buddy!
Ogami Nov 29, 2023 @ 10:32am 
Originally posted by Longy999:
Aaahhh, little fella tried to add me and then said Jew on one of my video's when I declined, what a loser

Enjoy the missing money little buddy!

Some people just cant handle taking responsibility for their own actions.
Last edited by Ogami; Nov 29, 2023 @ 10:33am
Longy999 Nov 29, 2023 @ 10:47am 
Originally posted by Ogami:
Originally posted by Longy999:
Aaahhh, little fella tried to add me and then said Jew on one of my video's when I declined, what a loser

Enjoy the missing money little buddy!

Some people just cant handle taking responsibility for their own actions.

Sometimes the truth hurts but it was the truth, he should be more concerned about where he leaked his details as opposed to writing nonsense on my video's, if it were me i wouldn't want it to happen again

An expensive lesson in common sense internet use...
< >
Showing 1-12 of 12 comments
Per page: 1530 50

Date Posted: Nov 29, 2023 @ 9:42am
Posts: 12