Account Compromised

[AuroBorealis]

Someone in china was able to access my account, charge my card, and change my store country region. ALL of this while I was supposed to be protected by steamguard. how could they have changed my store or logged in from an entirely different country without it being alerted to this

[N3tRunn3r]

On some day you had got fooled/tricked by scammers so to given away your steam account credentials on some fake and/or phishing website/link literally, so even the QR and/or SteamGuard codes got cloned for them and/or simply becoming bypassed ..

So, if you logged in into a scam/phishing site, you gave away all of your Steam Account credentials and login informations. A bot creates and places an API-key into your Steam account and therefore get semi-full access to it. This API-key grants remote access for developers or in your case for the scammer & hijacker.

Hundreds and thousands of Steam Accounts become hijacked like this on a DAILY BASIS, cuz of greed .. using account credentials and security measures without a brain ..

Your hijacked items are lost..!

Here, work through that list if you havent yet:

# # # # # # # # # # # # # # # # # # # # # # # # #
⚠️ YOUR ACCOUNT HAS BEEN COMPROMISED ⚠️
# # # # # # # # # # # # # # # # # # # # # # # # #

Stay cool!! They have gained access to your Steam account!!

You have been fooled/tricked by scammers/hijackers to give away your login credentials on some fake and/or phishing website, link or similar!!

DO "NOT" TRADE

Many scams try and scare you into trading your items and they become hijacked !!
Hijacked money and items will NOT be recovered by Steam Support since 2015 !!

Steam Item Restoration Policy

https://help.steampowered.com/en/faqs/view/3B6E-B322-2400-8D24

⚠️ Act now immediately and do following steps "ASAP" ⚠️

1. Scan for malware:
   https://www.eset.com/int/home/online-scanner/
   
   
2. Change your E-Mail Account password from a trusted/clean computer or device!!
   
   
3. Check, if your E-Mail address and Phone number are still correct:
   https://store.steampowered.com/account/
   
   
4. Revoke/Delete the API key, there should be a blank field in the APIKEY section:
   https://steamcommunity.com/dev/apikey
   
   
5. Immediately deauthorize all devices - this logs you out of Steam:
   https://store.steampowered.com/twofactor/manage
   
   
6. Change Steam Account password from a trusted/clean computer or device!!
   
   
7. Generate new backup codes:
   https://store.steampowered.com/twofactor/manage
   
   
8. Deauthorize all devices again:
   https://store.steampowered.com/twofactor/manage
   
   
9. Re-check the APIKEY section & report all involved scammer/hijacker on associated platform/s!!

How to Report a Scammer, Hijacker or Phisher

https://help.steampowered.com/en/faqs/view/4D07-D139-587C-2080

1. Report Player
   
2. They are involved in theft, scamming, fraud or other malicious activity
   
3. They are engaged in item theft or scamming
   or: They are trying to steal my account or information
   
4. Submit this account for review
   
5. "your personal text"

Recovering a Stolen or Hijacked Steam Account

• https://help.steampowered.com/en/wizard/HelpWithAccountStolen
  
  
• https://help.steampowered.com/en/faqs/view/0A94-F308-34A5-1988

To Recover, if you don't have access to the account

https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

Scam FAQ (Confidence Scams and Trade Scams)

https://help.steampowered.com/en/faqs/view/70E6-991B-233B-A37B


Also check from where your account was being accessed from:
https://help.steampowered.com/en/accountdata/SteamLoginHistory


Open a Support Ticket, Steam Support might help localizing the hijacker:
https://help.steampowered.com/en/wizard/HelpAccountDataQuestion


Here is more account related data to find:
https://help.steampowered.com/en/accountdata/


Good Luck !!

[Supafly]

Ursprünglich geschrieben von AuroBorealis:

I was supposed to be protected by steamguard.

Steam Guard = Extra Key. It is NOT a magical make your account immune to compromise. Somewhere along the line you allowed your username, password and LIVE Steam Guard code to become exposed. Often this is done by using dodgy phishing website. Can also be done my a users system being compromised and the hijacker stealing session tokens that can be used on their own system to appear as your system. This is why saving logged in status for logging in without actually entering anything can be a bad thing.

Scan for Malware/virus https://www.malwarebytes.com/mwb-download/
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device, mobile phone for example.
Generate new back up codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

[AuroBorealis]

How do I gain access to my app again and very importantly how do I change my store region back.

[AuroBorealis]

"You may not update your Steam account's country more than once every 3 months. Please complete this purchase using a payment method from your current region."

[Satoru]

Ursprünglich geschrieben von AuroBorealis:

"You may not update your Steam account's country more than once every 3 months. Please complete this purchase using a payment method from your current region."

Contact support about this

[AuroBorealis]

I have, hopefully things will be back to normal soon. Thank you everyone here for your help