Account hi-jacked, Items bought still on Steam Inventory

[randaaakoden]

Help with Steam Inventory, account been hi-jacked

This morning I found an unauthorized transaction on my bank account and after tracing I found that it was used in Steam. Someone bought some items off The Fortress 2. I've never played this game before so I don't know why Steam would allow the purchase. I tried to request a refund to my steam wallet from Steam but I was told refunds cant be issued for items that have already been consumed or transferred.
However, when I check my Steam Inventory the items are still there, and I found this notice on my Steam Accounts page:

"You have recently added Steam Wallet funds with a new credit card or a credit card that hasn't been used in a while. Access to the Community Market will be restricted and purchased microtransaction items or gifts may be untradable until you verify ownership of the credit card."

So, whoever used my account must have not been able to sell or transfer the items they bought using my account/card details. If I understand correctly, once I verify my card on Steam, I will then be able to sell these items in my Steam Inventory to recoup some of my lost money? I would rather just be refunded by Steam, but they just keep sending me auto generated replies.

Thanks to anyone who help, I'm new to computer gaming so some grace would be appreciated 🙇🏻‍♂️

[Aluvard]

First secure your account, otherwise they'll clean your card too - follow steps 1-6 to secure it:
1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Regarding items:
https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

[randaaakoden]

Thanks Aluvard! I've secured my account and reformatted my PC, because I believe the hackers remotely accessed it thats why their transactions didn't require my steam guard code for logging in as well as an OTP from my bank, since I have my PC as a trusted device. All the items they bought are still in my Steam Inventory. Once I verify my bank account through steam, do you think I can then be issued a refund for the items? I dont understand why steam is denying my refund request when the items are still in my inventory, they haven't been consumed or transferred (because Steam blocked it due to my card being unverified and not used for a while) I really don't want to have to resort to selling them on the marketplace 😅 Thanks again for your reply!

[MancSoulja]

Diposting pertama kali oleh randaaakoden:

Thanks Aluvard! I've secured my account and reformatted my PC, because I believe the hackers remotely accessed it thats why their transactions didn't require my steam guard code for logging in as well as an OTP from my bank, since I have my PC as a trusted device. All the items they bought are still in my Steam Inventory. Once I verify my bank account through steam, do you think I can then be issued a refund for the items? I dont understand why steam is denying my refund request when the items are still in my inventory, they haven't been consumed or transferred (because Steam blocked it due to my card being unverified and not used for a while) I really don't want to have to resort to selling them on the marketplace 😅 Thanks again for your reply!

Steam has NEVER returned items to their original owner, they used to generate an exact copy and give it to the original owner but it affected market prices too much so they stopped.

[StickyPawz]

Diposting pertama kali oleh randaaakoden:

Thanks Aluvard! I've secured my account and reformatted my PC

Just to be clear, did you do ALL the steps in post #1? Re-setting/formatting your pc isn't enough.

You might also consider *not* leaving your bankcard info saved online.

[randaaakoden]

Yes, I’ve done all the steps in post #1. However I have a question for step number 6, Steam shows me a page where I have to register a new API Key, does this mean there was no previosuly issued one? I cant register for a new one as I dont have a domain name… I’ve also removed my bank info from steam… I refrained from doing this as I really wanted to get refunded there, but…

As for my items, the hacker wasn’t really able to get them, they’re still in my Steam Inventory. Guess I just have to sell them on the marketplace myself… thanks for all your help guys! Aluvard, MancSoulja and StickyPawz. Much appreciated! 😁

[Dan5000]

Correct. If there is no API key, thats good. Leave it empty, normal users don't need one and if there was one, all you would have needed to do, was get rid of it.