Help Needed: Friend's Account Hacked, Unauthorized Purchases, and Game Bans

[macshower]

Hello,

My friend’s account was hacked, and the hacker purchased games worth hundreds of dollars and sent them as gifts to themselves. Additionally, my friend was banned from several games due to the hacker’s actions.

What can he do to request a refund and appeal the bans? He had Steam Guard enabled, but the account was still compromised.

Thank you for your assistance.

[Pscht]

Did your friend... wait, WHY isn't your friend asking?

Anyway, did your friend get the account back?

Next steps, these

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.

No idea if the games can still be refunded, depends on the time passed since they were bought and the amount of playtime. Bans can NOT be appealed in most cases.

Also, most important: No "hacking" took place, your friend gave away the login, knowingly or not.

[RPG Gamer Man]

Do this on your friends account:

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.

NOTE: Your items are your responisbility. Steam cannot give items or remove bans sadly. Your account is your responsibility. If you go to trading sites or go to nefarious sites, that is your problem.

[RPG Gamer Man]

引用自 Pscht：

Did your friend... wait, WHY isn't your friend asking?

Anyway, did your friend get the account back?

Next steps, these

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.

No idea if the games can still be refunded, depends on the time passed since they were bought and the amount of playtime. Bans can NOT be appealed in most cases.

Also, most important: No "hacking" took place, your friend gave away the login, knowingly or not.

Yea, really, why is the "friend" not asking and posting on here? Also, posted at same time...lol.

[magicISO Sweden]

Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.