Getting random emails of "THANK YOU FOR USING STEAM POINTS TO AWARD A COMMUNITY PROFILE"

[rgunte19]

I didn't even know this was a feature, and I am selling off these things, is this an automated feature, or a possible hack. I saw no actual monetary transactions, but password was changed and 2 factor auth was implemented. Though I usually have to do two factor anyways anytime from a new computer. This is screwy, and I believe someone has hacked these things and is buying them at low cost whatever it is.

Looking in the service it is tokens I got during games, or buying new ones. Do they goto the store if unused over a period of time?

Am I going to get actual charges later for these - if I do - I will file civil suits against steam.

[miamew3]

You get points by buying games or receiving awards, you can then spend those points in the points shop https://store.steampowered.com/points/shop/ or give them away by giving people awards.

Seeing as your account is giving awards out and not by your own doing, your account has been compromised. Follow the steps below to secure your account.

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[mpiszczo]

Same thing happened to me.
The email message says,"They will be granted up to 200 Steam Points (available in 14 days)". So there still might be time before the transaction is completed.
Any way to reverse this or deny the transaction?

[rawWwRrr]

Originally posted by mpiszczo:

Same thing happened to me.
The email message says,"They will be granted up to 200 Steam Points (available in 14 days)". So there still might be time before the transaction is completed.
Any way to reverse this or deny the transaction?

No.

Secure your account.

[Aluvard]

Originally posted by mpiszczo:

Same thing happened to me.
The email message says,"They will be granted up to 200 Steam Points (available in 14 days)". So there still might be time before the transaction is completed.
Any way to reverse this or deny the transaction?

Reset your password.

[lattanzios1]

Thank you so much for this post. Someone stole 22,000 points from me today all at once with two or more different accounts. I reset my password and got them all back. I have no idea how they managed to do this as my computer is very secure.

[lattanzios1]

Originally posted by rawWwRrr:

Originally posted by mpiszczo:

Same thing happened to me.
The email message says,"They will be granted up to 200 Steam Points (available in 14 days)". So there still might be time before the transaction is completed.
Any way to reverse this or deny the transaction?

No.

Secure your account.

If you immediately change your password the points are refunded to you're account. This just happened to me with 28,000 or so points.

[lserrai]

Same happened to me and i have 2fa so whats the purpose of using 2fa if someone can give themselves awards from my aacount?

[Lithurge]

Originally posted by lserrai:

Same happened to me and i have 2fa so whats the purpose of using 2fa if someone can give themselves awards from my aacount?

Because 2fa doesn't protect against logging into fake websites and giving them all your login details so they have direct access to your account. Change your password, deauthorize all other devices apart from your own PC and remove the API key.