Friend scammed

[Goku]

So my friend watched fake esl stream,scanned the code for ♥♥♥♥♥♥♥♥♥♥ then accepted login on steam guard and his acc got hacked,he cant reset password cause probably guy tried to reset password already and he did changed it so it says he exceeeee the limit for password change try later.i can see his profile from friend list but its kinda locked u cant see inv games nothing on profile.what is best course of action for him,or he needs to move on and accept that his steam is lost.

[✨Saint✨]

Just look around on the forums and you will realize that it is not hacked, but scammed, because your "friend" gave all the credentials, willingly.
There are many posts where people are getting scammed, check one of those.

[Aluvard]

If he still has access to his account, he need to follow those steps:

1. Scan for malware https://www.malwarebytes.com/
   
2. Check that the email and phone number on the Steam account are still yours.
   
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
   
4. Change passwords from a trusted/clean device.
   
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
   
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Regarding items:
https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

If not:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

[Elucidator]

Tell people to stop rewarding scammers.

You should both, try to protect yourself, use what you know to protect at least one other person, but most importantly stop rewarding people who think they can cheat systems, probe or manipulate people through dishonest and input, disinformation, etc.

You got scammed, so now you have rewarded the scammer. If there was no reward, there would be no scam.

Don't just protect yourself for your own sake, but stop them from claiming rewards so easily.

[Goku]

Elucidator님이 먼저 게시:

Tell people to stop rewarding scammers.

You should both, try to protect yourself, use what you know to protect at least one other person, but most importantly stop rewarding people who think they can cheat systems, probe or manipulate people through dishonest and input, disinformation, etc.

You got scammed, so now you have rewarded the scammer. If there was no reward, there would be no scam.

Don't just protect yourself for your own sake, but stop them from claiming rewards so easily.

Your answer seems like google translate english i cant understand whats your point.He got scammed cause he is not so much in cs2 cs waters and dont know what people are capable of doing.Im not his shadow there for i cant watch what is he doing 24 7 so i dont realy see point you are making with your answer dont reward scammers.He got tricked cause he is newbie,my question was can he get his acc back or not.But since he didnt have anything worth stealing on that acc he just made another one.

[Elucidator]

Goku님이 먼저 게시:

Your answer seems like google translate english i cant understand whats your point.He got scammed cause he is not so much in cs2 cs waters and dont know what people are capable of doing.Im not his shadow there for i cant watch what is he doing 24 7 so i dont realy see point you are making with your answer dont reward scammers.He got tricked cause he is newbie,my question was can he get his acc back or not.But since he didnt have anything worth stealing on that acc he just made another one.

Here's my question:
Why would your friend not read this thread?
Who do you think I was addressing?

People who look for these threads using search are often victims of scam practises. The addressee isn't You, the OP of this thread, but a You plural. It refers to those who get scammed and read my post + your friend. The meaning of "You" depends on the context. Not everyone reading my post is addressed with You, just those that got scammed.

"both" refers to the victim the OP mentions (see post 0), "your friend" + whoever else reads my post and got scammed.

My point is simple:
You don't think about it nor care about it up front and behave recklessly. That is precisely why these scams work and why scammers get rewarded; and thus also why scammers continue.

Scamming happens in every game, on every platform, including discord and whatsnot. All of them use the same schemes. It is something you diffidently could have known or be aware of.

Goku님이 먼저 게시:

i cant understand whats your point.He got scammed cause he is not so much in cs2 cs waters and dont know what people are capable of doing.Im not his shadow there for i cant watch what is he doing 24 7 so i dont realy see point you are making with your answer dont reward scammers.

And you complain about my use of English.

No, your friend got scammed, because he doesn't care enough about security.
He fell victim to advertisement done by the scammer and gave away his information for free, not realizing that they were lying about their promises.
The culprit is someone who doesn't care about other people and uses you and everyone else as their farm. You're crops for them to harvest from. They are parasites; delivering nothing but stress as a return and people let them harvest from them.

My point is that from the moment you connect to the internet, you're going to encounter scammers at some point. You should have known and maybe you did; because you do know the terms "Hacked" and "Scammed". You have heard of these things... your friend has heard of these things.. therefore you could have cared.


Edit:
Here's the thing:
The world only has one motivator: Money.
People will do everything for money. On the internet you do not carry a face, and there is no emotional connection. This makes it easier to do immoral things.
Thanks to this combination, you can expect antisocial selfish selfcentered scum to try an 'abuse the systems in place for personal benefit', either through cheating (making them number 1 in game) or though gaining wealth (possessions).
You're going to encounter scammers online, fake websites, fake products, people pretending to be someone they are not, etc. If you open up a server, its going to get hacked. (especially because personal details and profiles are worth money.)

Protect yourself. Do some research before you do anything.

tl;dr: You were being scolded, for reasons.

[Supafly]

Hijacked not hacked. Hacking requires exploiting weakness in code. That doesn't happen on Steam. Hijacking is the issue and that's when users try logging on using a phishing website that steals their credentials. Tell your friend to recover and secure the account with the steps in post #2 .

[Goku]

Elucidator님이 먼저 게시:

Goku님이 먼저 게시:

Your answer seems like google translate english i cant understand whats your point.He got scammed cause he is not so much in cs2 cs waters and dont know what people are capable of doing.Im not his shadow there for i cant watch what is he doing 24 7 so i dont realy see point you are making with your answer dont reward scammers.He got tricked cause he is newbie,my question was can he get his acc back or not.But since he didnt have anything worth stealing on that acc he just made another one.

Here's my question:
Why would your friend not read this thread?
Who do you think I was addressing?

People who look for these threads using search are often victims of scam practises. The addressee isn't You, the OP of this thread, but a You plural. It refers to those who get scammed and read my post + your friend. The meaning of "You" depends on the context. Not everyone reading my post is addressed with You, just those that got scammed.

"both" refers to the victim the OP mentions (see post 0), "your friend" + whoever else reads my post and got scammed.

My point is simple:
You don't think about it nor care about it up front and behave recklessly. That is precisely why these scams work and why scammers get rewarded; and thus also why scammers continue.

Scamming happens in every game, on every platform, including discord and whatsnot. All of them use the same schemes. It is something you diffidently could have known or be aware of.

Goku님이 먼저 게시:

i cant understand whats your point.He got scammed cause he is not so much in cs2 cs waters and dont know what people are capable of doing.Im not his shadow there for i cant watch what is he doing 24 7 so i dont realy see point you are making with your answer dont reward scammers.

And you complain about my use of English.

No, your friend got scammed, because he doesn't care enough about security.
He fell victim to advertisement done by the scammer and gave away his information for free, not realizing that they were lying about their promises.
The culprit is someone who doesn't care about other people and uses you and everyone else as their farm. You're crops for them to harvest from. They are parasites; delivering nothing but stress as a return and people let them harvest from them.

My point is that from the moment you connect to the internet, you're going to encounter scammers at some point. You should have known and maybe you did; because you do know the terms "Hacked" and "Scammed". You have heard of these things... your friend has heard of these things.. therefore you could have cared.


Edit:
Here's the thing:
The world only has one motivator: Money.
People will do everything for money. On the internet you do not carry a face, and there is no emotional connection. This makes it easier to do immoral things.
Thanks to this combination, you can expect antisocial selfish selfcentered scum to try an 'abuse the systems in place for personal benefit', either through cheating (making them number 1 in game) or though gaining wealth (possessions).
You're going to encounter scammers online, fake websites, fake products, people pretending to be someone they are not, etc. If you open up a server, its going to get hacked. (especially because personal details and profiles are worth money.)

Protect yourself. Do some research before you do anything.

tl;dr: You were being scolded, for reasons.

U have some problems.Im not reading this.You need Jesus.This is not that deep i asked a question for him and thats it.You clearly have too much time to be so botherd by this.

[McVilllain]

Does he have any payment or billing info saved or a lot of games and items? You said he's new to it so if he doesn't have anything to lose he could just make another account and be more careful next time.

Aluvard님이 먼저 게시:

If he still has access to his account, he need to follow those steps:

1. Scan for malware https://www.malwarebytes.com/
   
2. Check that the email and phone number on the Steam account are still yours.
   
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
   
4. Change passwords from a trusted/clean device.
   
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
   
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Regarding items:
https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

If not:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

If he's getting screwed out of information and purchases he's made he needs to do this, with the added step of contacting his bank to let them know what happened and changing his bank account password and getting a new debit card if he had a debit card saved. Since he logged in on an unaffiliated website with his steam account, I doubt he has any malware on his computer unless he legit downloaded something, but you could help him do all of these things on YOUR computer just to be safe.

In the future, he should try and vet websites before logging in and stick to twitch and youtube for watching streams/matches. For trading, you can find reputable websites often times on reddit or something, csgo.backpack.tf is good, its parent website has been running a very long time and I've used the ♥♥♥♥♥ out of it. ALWAYS USE PAYPAL WHEN PURCHASING THINGS ON WEBSITES, because paypal obfuscates your bank information for you.

Hope this helps!

[Goku]

McVilllain님이 먼저 게시:

Does he have any payment or billing info saved or a lot of games and items? You said he's new to it so if he doesn't have anything to lose he could just make another account and be more careful next time.

Aluvard님이 먼저 게시:

If he still has access to his account, he need to follow those steps:

1. Scan for malware https://www.malwarebytes.com/
   
2. Check that the email and phone number on the Steam account are still yours.
   
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
   
4. Change passwords from a trusted/clean device.
   
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
   
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Regarding items:
https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

If not:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

If he's getting screwed out of information and purchases he's made he needs to do this, with the added step of contacting his bank to let them know what happened and changing his bank account password and getting a new debit card if he had a debit card saved. Since he logged in on an unaffiliated website with his steam account, I doubt he has any malware on his computer unless he legit downloaded something, but you could help him do all of these things on YOUR computer just to be safe.

In the future, he should try and vet websites before logging in and stick to twitch and youtube for watching streams/matches. For trading, you can find reputable websites often times on reddit or something, csgo.backpack.tf is good, its parent website has been running a very long time and I've used the ♥♥♥♥♥ out of it. ALWAYS USE PAYPAL WHEN PURCHASING THINGS ON WEBSITES, because paypal obfuscates your bank information for you.

Hope this helps!

He had card safed but there is no way to use the card if he doesnt accept the bank app verification for deposits of any amount.Yea he is typical new guy who thought someone is actualy willing to give him ♥♥♥♥♥♥♥♥♥♥,if he had asked me first i would tell him immadietly its scam.But he just did it.But yea only thing he paid for on that acc was prime for csgo so yea,not worth the husstle to do anything.Thanks for help.I already did step like this when my gf got api scammed then they tried to scam her to send skins acting like steam email support.In the end if u have 2 way autheticator aka steam guard they cant do ♥♥♥♥ if u dont accept and she didnt so it was easy to get her acc back.But his biggest mistake was doing that basicly.Accepting the steam guard login notification.