Someone stole my all inventory

[Bjorn]

Hi,

In the last few months, I bought a lot of cool items to my steam inventory.
Today while im playing, my items are gone.
I try to logout and go to my steam account but there was an error so i tought
it will be ok, but a few minutes later I recognize that the inventory is back
and no items inside!!

I look in my trade history and someone is really stealing my items!
this account: https://steamcommunity.com/id/lavrovasiya75
is took all my inventory!!!

What should i do ?!
** I HAVE STEAM GUARD AUTHENTICATOR! (no message for trade is sent).

[J4MESOX4D]

Your account was compromised. Only you know how this could have happened. Secure your account by doing the following steps:-

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

Scammed items are not returned https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

[Muppet among Puppets]

Can you still login with the codes from your auth app?
Test with a browser.

If you did not need to confirm the trade but still can use the codes,
someone duplicated your auth app.

If its on phone, it points to someone having gained access to your phone account and backups.


So make sure you get the facts straight to find the scale of the problem.

In any case, if a trade happened without your interaction,
secure the phone account as well.

And all accounts with the same password or any connection. (Dont re-use passwords in general)



My guess, the best approach to start fresh, set steam guard to email. And then set up steam guard again to use the app. To invalidate the old instance.
This requires that your email is safe!

Do not disable steam guard in the process.

[Supafly]

Originally posted by ¿:

** I HAVE STEAM GUARD AUTHENTICATOR! (no message for trade is sent).

That doesn't make your account immune to being compromised. It just an extra key. If you give your keys away to you home someone can enter it and steal stuff. You've clearly logged in on a dodgy site giving them access to your account.

Do the steps in post #1 to secure your account.

Stop using dodgy sites.

Remove the link as naming and shaming is against the rules and could get you in trouble. But but you naming a thief = worthless. For all we know you scammed them and they could plug your profile link in another thread. You and only YOU should report the account via their profile page, block and move on.

All trades are final. There is no way to get your items back.

[Muppet among Puppets]

Originally posted by Dead Monkey:

Do the steps in post #1 to secure your account.

Post 1 does not solve the problem if a trade happened "on its own"

[Supafly]

Originally posted by Muppet among Puppets:

Originally posted by Dead Monkey:

Do the steps in post #1 to secure your account.

Post 1 does not solve the problem if a trade happened "on its own"

But it didn't happen on it's own. One way or another OPs account was compromised. First thing to do is prioritise re-securing the account.

[Muppet among Puppets]

Originally posted by Dead Monkey:

Originally posted by Muppet among Puppets:

Post 1 does not solve the problem if a trade happened "on its own"

But it didn't happen on it's own. One way or another OPs account was compromised. First thing to do is prioritise re-securing the account.

If you read my post you spot the fine difference that means, someone has the same tools as the user.
If you do post 1, the hijacker still has the same tools.

[Supafly]

Originally posted by Muppet among Puppets:

Originally posted by Dead Monkey:

But it didn't happen on it's own. One way or another OPs account was compromised. First thing to do is prioritise re-securing the account.

If you read my post you spot the fine difference that means, someone has the same tools as the user.
If you do post 1, the hijacker still has the same tools.

Doing these 2 steps
Deauthorize all devices https://store.steampowered.com/twofactor/manage

and

Change your password on a secure device.

Will prevent a duplicate Authenticator from working as it'd require the new password. Thus re-securing their account is the first thing they should do.

As for the 'on it's own' phrase it is often used when the trade is sent to someone other than who the user intends. API scam to a impersonator account. So it becomes by a scammer/phisher/hijacker that the user has no knowledge off.

[Muppet among Puppets]

The other auth will work as the main one still.

Try your steps with your own auth. Are you locked out?

[Rebo]

Originally posted by HamasIsISIS:

Hi,

In the last few months, I bought a lot of cool items to my steam inventory.
Today while im playing, my items are gone.
I try to logout and go to my steam account but there was an error so i tought
it will be ok, but a few minutes later I recognize that the inventory is back
and no items inside!!

I look in my trade history and someone is really stealing my items!
this account: https://steamcommunity.com/id/lavrovasiya75
is took all my inventory!!!

What should i do ?!
** I HAVE STEAM GUARD AUTHENTICATOR! (no message for trade is sent).

did you ever get this resolved? i was recently scammed