Refund without consent

[9]

I bought some games with the recent Spring Sale that was out on Steam. I spent money on 5 games. I woke up today to my email blowing up that my games were in the process of refund. The emails were all in Chinese as well. I realized my account was compromised so I did a pass change and I redid my Steam app guard just for safe measures. It is disappointing how easily the Steam guard is passed through.

The money that was refunded also was refunded to my Wallet and not in my card so I have money sitting on my Steam Wallet that I cannot cash out. I contacted Steam support in the meanwhile explaining my situation and everything. How often are situations like these solved and how well are the steam support actions?

[FFL2and3rocks]

They will not bend the rules for you to allow you to cash out or re-purchase the games with their old sale prices, if that's what you were hoping for. Focus on figuring out how you were tricked into giving away your account information to make sure it doesn't happen again.

[The Giving One]

引用自 arx：

I bought some games with the recent Spring Sale that was out on Steam. I spent money on 5 games. I woke up today to my email blowing up that my games were in the process of refund. The emails were all in Chinese as well. I realized my account was compromised so I did a pass change and I redid my Steam app guard just for safe measures. It is disappointing how easily the Steam guard is passed through.

The money that was refunded also was refunded to my Wallet and not in my card so I have money sitting on my Steam Wallet that I cannot cash out. I contacted Steam support in the meanwhile explaining my situation and everything. How often are situations like these solved and how well are the steam support actions?

Just so we are clear here, you have Steam Guard Mobile (mobile authenticator) or regular Steam Guard ?

More simply, is the shield here green or gold ?

https://store.steampowered.com/account/

[9]

引用自 The Giving One：

引用自 arx：

I bought some games with the recent Spring Sale that was out on Steam. I spent money on 5 games. I woke up today to my email blowing up that my games were in the process of refund. The emails were all in Chinese as well. I realized my account was compromised so I did a pass change and I redid my Steam app guard just for safe measures. It is disappointing how easily the Steam guard is passed through.

The money that was refunded also was refunded to my Wallet and not in my card so I have money sitting on my Steam Wallet that I cannot cash out. I contacted Steam support in the meanwhile explaining my situation and everything. How often are situations like these solved and how well are the steam support actions?

Just so we are clear here, you have Steam Guard Mobile (mobile authenticator) or regular Steam Guard ?

More simply, is the shield here green or gold ?

https://store.steampowered.com/account/

The shield is green and has always been green. I used to have the shield activated to my email but I changed it to my app around 4 months ago. It's really unfortunate how a multimillion-dollar company does not have recent activity/login notifications like Microsoft where it shows if you were hacked or not. I didn't know I was compromised because nothing was changed on my account, everything was the same but the games went missing. I checked my email and realized that there were 5 email requests that were in a whole different language.

[9]

引用自 FFL2and3rocks：

They will not bend the rules for you to allow you to cash out or re-purchase the games with their old sale prices if that's what you were hoping for. Focus on figuring out how you were tricked into giving away your account information to make sure it doesn't happen again.

I know 101% I wasn't tricked into giving my account away because I know about the danger and consequences. I don't use steam that much for my account to be reaching a harmful audience. I was hoping if they could reverse the game purchases or something along those lines.

[The Giving One]

Either your login information was phished in a fake login page or other means, or someone had access to your mobile device.

Valve's database was not breached just so someone could pull off the hack of a century, just to get into your account.

Not when they would have had millions upon millions worth of payment methods, banking information, email addresses, phone numbers, etc. right at their fingertips. They would not waste such a hack on just getting into one, single account.

Somehow, your account was compromised and it originated from your end somewhere. We can try to help you figure it out, if you wish.

Do you see any Key in the box when using this link ?

https://steamcommunity.com/dev/apikey

The box should be empty. There should not be a key in that box. If there is, revoke it.

EDIT.....

The format has changed if there is no key. Now, it should just say "Your account does not meet the requirements for a developer API key." if there is no key, meaning all is well if you see no box with no key in it.

[9]

引用自 The Giving One：

Either your login information was phished in a fake login page or other means, or someone had access to your mobile device.

Valve's database was not breached just so someone could pull off the hack of a century, just to get into your account.

Not when they would have had millions upon millions worth of payment methods, banking information, email addresses, phone numbers, etc. right at their fingertips. They would not waste such a hack on just getting into one, single account.

Somehow, your account was compromised and it originated from your end somewhere. We can try to help you figure it out, if you wish.

Do you see any Key in the box when using this link ?

https://steamcommunity.com/dev/apikey

The box should be empty. There should not be a key in that box. If there is, revoke it.

EDIT.....

The format has changed if there is no key. Now, it should just say "Your account does not meet the requirements for a developer API key." if there is no key, meaning all is well if you see no box with no key in it.

Yeah I see a box with no key. Maybe it is something on my pc or on my end. My question is, how do I make sure that this doesn’t happen again? I reset my pass and my steamguard.

[The Giving One]

We normally suggest the following steps, as your case sounds like an API compromise but I can't be sure, since you said the API box was empty. Still, doing the steps where they are not needed won't cause any harm. Not doing them where needed may allow more harm to your account.

Follow all the steps in order.

Scan for Malware : https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

Also do a scan on your mobile device.

Just to add to try to help you figure this out :

引用自 arx：

The shield is green and has always been green. I used to have the shield activated to my email but I changed it to my app around 4 months ago.

Not to be rude at all, but would that not mean then that it was not always green but once was gold, when you had email Steam Guard only ? You just said you changed it 4 months ago, so it seems it was not always green, meaning the account was less secure at that time.

The point is, just because something happened to your account recently (games refunded) that does not necessarily mean that they did not have the compromise to your account a while back. It could have happened some time ago and they just now decided to utilize the compromise for whatever reason.

Maybe they did not have any reason to use their access to your account then, but lately they had a good reason to (refunding games) ?

If I understood you right, you said you don't use Steam that much, so maybe that's why as using Steam recently triggered their time to strike because attacking your account now provided better benefit than attacking it a while back :

引用自 arx：

I don't use steam that much for my account to be reaching a harmful audience.

It would seem that you buying some games as you said from the Spring sale, triggered their time to strike, as you said you woke up the next day and it was going on with your account.

引用自 arx：

I bought some games with the recent Spring Sale that was out on Steam. I spent money on 5 games. I woke up today to my email blowing up that my games were in the process of refund.

Just trying to help piece it together.

[9]

引用自 The Giving One：

We normally suggest the following steps, as your case sounds like an API compromise but I can't be sure, since you said the API box was empty. Still, doing the steps where they are not needed won't cause any harm. Not doing them where needed may allow more harm to your account.

Follow all the steps in order.

Scan for Malware : https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

Also do a scan on your mobile device.

Just to add to try to help you figure this out :

引用自 arx：

The shield is green and has always been green. I used to have the shield activated to my email but I changed it to my app around 4 months ago.

Not to be rude at all, but would that not mean then that it was not always green but once was gold, when you had email Steam Guard only ? You just said you changed it 4 months ago, so it seems it was not always green, meaning the account was less secure at that time.

The point is, just because something happened to your account recently (games refunded) that does not necessarily mean that they did not have the compromise to your account a while back. It could have happened some time ago and they just now decided to utilize the compromise for whatever reason.

Maybe they did not have any reason to use their access to your account then, but lately they had a good reason to (refunding games) ?

If I understood you right, you said you don't use Steam that much, so maybe that's why as using Steam recently triggered their time to strike because attacking your account now provided better benefit than attacking it a while back :

引用自 arx：

I don't use steam that much for my account to be reaching a harmful audience.

It would seem that you buying some games as you said from the Spring sale, triggered their time to strike, as you said you woke up the next day and it was going on with your account.

引用自 arx：

I bought some games with the recent Spring Sale that was out on Steam. I spent money on 5 games. I woke up today to my email blowing up that my games were in the process of refund.

Just trying to help piece it together.

I will definitely scan everything and make sure my PC is clear, thank you!

I am not exactly sure how the steam guard works but 4 months ago I activated my phone app steam guard from my email code steam guard. I am sorry if there was a misunderstanding. I just dont know what to do with all this money sitting in my wallet for the time being. If they cant find a way for the games, I guess I would have to wait until the next sale.

[The Giving One]

Yes, good luck and thanks for following along. Others may post with other advice so stay subbed to the thread.

As far as games on sale, it might take a while, but one things for sure on Steam...

There will be another sale, and those games will probably be even cheaper then, when there is.

Feel free to post other questions if you have them.

[9]

引用自 The Giving One：

Yes, good luck and thanks for following along. Others may post with other advice so stay subbed to the thread.

As far as games on sale, it might take a while, but one things for sure on Steam...

There will be another sale, and those games will probably be even cheaper then, when there is.

Feel free to post other questions if you have them.

Do you know how long support takes to reply?

[nullable]

https://store.steampowered.com/stats/support/