my friend's account has been hijacked, all recovery options were deleted. what can he do?

[JolyJew СлаваУкраине]

my friend's steam account was neglected for quite a long time, and he didn't have steam guard or authinticator (probably because he stopped playing PC when these features were introduced)
now he decided to check on his account and discovered it's impossible to access

password is changed.
recovery email also was changed
recovery phone number also was changed
there is no credit card for verifications either because all his purcheses were made with paypall.

contacting steam support only leads to automated systems that request recovery email/number which, as you know, are completely changed

so what can be done? is his account toast? is there a way to contact a person from steam support instead of dealing with a souless automated system?

thx in advance for all comments

[Lilim]

Account recovery:

Steam Support page about Account Recovery

You must be logged out of all accounts to start the account recovery process.

You don't need access to the email, phone or password currently tied to the hijacked/hacked/stolen/lost account for this to work. Just pick the "I do not have access..." or a similar option when asked.

The recovery process allows you to provide proof of ownership.

And to help you sign-in: https://help.steampowered.com/en/wizard/HelpWithLogin

A step by step guide to the recovery process:

https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

[Lilim]

Αναρτήθηκε αρχικά από JolyJew СлаваУкраине:

there is no credit card for verifications either because all his purcheses were made with paypall

If a purchase was made through Steam using a PayPal account, please provide the following with your Support Ticket:

1. The full name on the PayPal Account
   
2. The full billing address on the PayPal Account
   
3. Attach a screenshot of a Steam purchase as it is shown in your PayPal account, including the invoice ID, made on the Steam Account in question

From: Providing Proof of Ownership

[ReBoot]

Αναρτήθηκε αρχικά από JolyJew СлаваУкраине:

contacting steam support only leads to automated systems that request recovery email/number which, as you know, are completely changed

Once email recovery fails, the option to recover by account name opens up. Since that can't be changed, it's an easy recovery vector.

[JolyJew СлаваУкраине]

thx for the reply, my friend submitted a recovery request and recieved a messege that he must verify his support ticket by using his new email, but he never recieved any email

[Lilim]

Αναρτήθηκε αρχικά από JolyJew СлаваУкраине:

...and recieved a messege that he must verify his support ticket by using his new email, but he never recieved any email

Did he check his spam folder?

[JolyJew СлаваУкраине]

yes, he did

[no154370]

His email accounts most likely being compromised too

The hijacker most likely intercept the email to his email account

-------

Ask him to scan his computer for malware and virus first before account recovery

[JolyJew СлаваУкраине]

k thx ill tell him to use a different email for recovery