Sending a fishy trade

[borny]

A friend of mine sent me his cs skins for a week, im about to send them back but i don't use steam guard, so i had to confirm through my email.
However when i opened my email i saw this:
https://imgur.com/a/qTVxwXl
It says "you are not friends with this user" but we ARE friended, so im worried it's phishing.
When i click on his name on the email, it does link to his actual profile, the level checks out, the date he's been on steam checks out, but its this "you are not friends with this user" that freaks me out.
I clicked "accept" anyway cause i don't know what else to do, he DID receive the trade, it's trade locked for 24 hours and they are neither in my inventory or his inventory, should we be good though?
Cause yeah, idk why it says that we aren't friended on my mail

[󠁳 ⁧Silverwing]

I am the friend in question, if that's an issue on Steam's side they should probably fix or address it

[Pscht]

Those emails say "you're not friends with this user" about my own alt. I thought that somehow had to do with my privacy settings but you two are clearly public.

[Teksura]

Just to be certain, do the following first:

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.


Do each of the steps.


Also check your sent offer history to see if there was an identical offer sent that was canceled.