Scamm

[Deale]

Hello! Last night i placed a buy order for cs2 knifes. I clicked on the counter strike 2 filter option in the marked and used the advanced search to look for knifes. When i woke up in the morning i saw that the buy order was completed for 188$ but when i look at the order, somehow i was scammed and received an item from dota 2 which has a value of 0.08. How is this even possible? anyone heard of this type of error/scamm before? I know you might say it was my mistake and i didn't checked the item but i checked it multiple times before placing the buy order...I used inspect in game option as well and everything looked fine...Do you have any idea if steam will help me?

[Cathulhu]

Hijacked, not hacked. You leaked your account credentials somehow.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Steam does not return inventory items or wallet funds: https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

If you no longer have access to your account, read this:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

[Lilim]

Publicado originalmente por Cosmin:

Hello!

Hi!

Stop using scam sites. You are in a group that advertises such a scam site (you also have that site in your name history).

Never enter your Steam login information on a third-party site!

Publicado originalmente por Cosmin:

Do you have any idea if steam will help me?

Unfortunately, your items are gone.

[Deale]

I still have access to my account. I have email address verified, steam guard, phone number and everything is safe...How can be possible to be Hijacked with no notification on my mail, phone number or steam guard? This is steam's fault 100% This type of scamm should not be possible

[Deale]

There has to be something that can be done :( 188$ is a lot for me...I cannot lose that much money. I need to find a solution...

[Haruspex]

Publicado originalmente por Cosmin:

I still have access to my account. I have email address verified, steam guard, phone number and everything is safe...How can be possible to be Hijacked with no notification on my mail, phone number or steam guard? This is steam's fault 100% This type of scamm should not be possible

Type "Scam" into the forum search bar, and read the thousands upon thousands of instances of people who fell for the same thing you did.

They all have one thing in common; They were tricked into giving away their credentials, thus allowing the scammer in. There's lots of ways it happens. "Catch $50", "Vote for my team in the tournament.", "I accidentally reported you, and now you'll be banned.". Probably the most common method is the use of unofficial, third-party trading/gambling sites. I don't believe a single one of these are legitimate, though the best among them probably do some degree of legitimate trading to cover for the scamming they're doing off the top.

(FYI, there's a known scam trading site in your username history, and a scammy looking bot account in your friends list. Proof you've fallen for it at some point, and that may not be the only point where you fell for it.)

The only legitimate place to trade on Steam, is on Steam.

That "How to Recover Your Account" guide posted above is your best option to ensure your account is re-secured. Your items are gone.

[J4MESOX4D]

Publicado originalmente por Cosmin:

I still have access to my account. I have email address verified, steam guard, phone number and everything is safe...How can be possible to be Hijacked with no notification on my mail, phone number or steam guard? This is steam's fault 100% This type of scamm should not be possible

Because you allowed your account to be hijacked through phishing resulting in the scammers enabling a curated buy order of a low value item to move your money to their accounts. Just because you have access to your account and Steam Guard doesn't make you immune to being compromised if your details are leaked or captured. The whole point of scams like this is not to steal your account or even make you aware something has happened until the scam is complete.

[Deale]

so now if i changed my steam password, de-authorized all devices, changed my email address i should be safe?

[J4MESOX4D]

Publicado originalmente por Cosmin:

so now if i changed my steam password, de-authorized all devices, changed my email address i should be safe?

All steps provided in response #1 in order. Then after that, never give away your credentials to any 3rd party site.

[Haruspex]

Publicado originalmente por Cosmin:

so now if i changed my steam password, de-authorized all devices, changed my email address i should be safe?

If you followed the entire guide, step by step, you should be safe. It won't get your items or Steam wallet back, but at least you'll be better equipped to avoid such scams in the future.

[Lilim]

Publicado originalmente por Cosmin:

so now if i changed my steam password, de-authorized all devices, changed my email address i should be safe?

Have you scanned your PC for malware? What about your API key?

[Deale]

Ok...thank you everyone for your answers... :(

[Lilim]

Publicado originalmente por Cosmin:

Ok...thank you everyone for your answers... :(

You should remove that scam site from your name history too.

How do I remove my profile name history?

Steam stores the previous 10 names that you've used for your profile. If you'd like to clear this history, follow these instructions:

• Log in to your account and go to your profile
  
• Click the drop down arrow next to your current persona name
  
• Select clear previous aliases

[Deale]

i am now reinstalling my windows to be sure.. and the API key done as well