Counter Strike Scam (My skin are gone)

[MeRToN YoLo]

I've discovered a scam i didn't know about before:

A chat message from a guy saying he's a steam admin and that one of your skin is a stolen one.
Nothing new.

He says he will examite your case and to protect your skin you can trade them during the process on one of your another account. I have only one so he said that i can do it with a friend from my list.
I chosed one i know irl and see him every week, a close one.
i did the confirmation on the steam app.

Suddenly the chat disappear and my cs2 skin are gone.

I've check twice, it was my friend account displayed on the phone.

I'm sick (and stupid)

[J4MESOX4D]

You were baited into initiating a trade whilst your account was compromised allowing the scammer to intercept it. Do the following steps to secure your account:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Scammed items lost this way are not returned. There is no such things as Steam admins.

[MeRToN YoLo]

Originally posted by J4MESOX4D:

You were baited into initiating a trade whilst your account was compromised allowing the scammer to intercept it. Do the following steps to secure your account:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Scammed items lost this way are not returned. There is no such things as Steam admins.

I know that since the scam. When is Valve going to secure is api? the scammer used a friend identity so he abused of steam system.

[Pscht]

The API key couldn't have gotten put there without YOUR cooperation. Not Valve's fault, and API keys have genuine uses, so they are not going anywhere.

[Aluvard]

Originally posted by MeRToN YoLo:

I know that since the scam. When is Valve going to secure is api? the scammer used a friend identity so he abused of steam system.

Your account was already compromised. When you selected your friend, bot on your account canceled that trade and set up a new one.

[J4MESOX4D]

Originally posted by MeRToN YoLo:

Originally posted by J4MESOX4D:

You were baited into initiating a trade whilst your account was compromised allowing the scammer to intercept it. Do the following steps to secure your account:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Scammed items lost this way are not returned. There is no such things as Steam admins.

I know that since the scam. When is Valve going to secure is api? the scammer used a friend identity so he abused of steam system.

To access the API, you need access to the account so the user securing theirs is all that matters. Also the API merely provides read-only information back to the scammers so even if the user allow it to become compromised, the scammers still require the victim to perform several actions to facilitate a scam.

[MeRToN YoLo]

But at least Valve should make some pop up to advertise about the basics rules.

Not everyone is a geek.

[Cinemax]

Originally posted by MeRToN YoLo:

But at least Valve should make some pop up to advertise about the basics rules.

Not everyone is a geek.

You mean like the "you are responsible for your account security" rule that people on this forum harp constantly?

Whenever someone on the internet asks you to do something, you tell them to go ♥♥♥♥ themselves. Simple solution, works every time.

[MeRToN YoLo]

easy to say when you know it...

[Unn4m3d (♥AUT♥)]

Originally posted by MeRToN YoLo:

easy to say when you know it...

It's not Valves fault if you dont read. The information is plentiful.
Both from Valve as well as thousands of "i have been scammed" Threads.

[J4MESOX4D]

Originally posted by MeRToN YoLo:

But at least Valve should make some pop up to advertise about the basics rules.

Not everyone is a geek.

You shouldn’t need to be told not to give away your credentials to phishing sites.

[76561198407601200]

Originally posted by MeRToN YoLo:

Originally posted by J4MESOX4D:

You were baited into initiating a trade whilst your account was compromised allowing the scammer to intercept it. Do the following steps to secure your account:-

1. Scan for malware {LINK REMOVED}https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Scammed items lost this way are not returned. There is no such things as Steam admins.

I know that since the scam. When is Valve going to secure is api? the scammer used a friend identity so he abused of steam system.

They have security in place regarding the api is the user not providing sensitive information to others.

[MeRToN YoLo]

I think all people here doesn't understand: it was not to get my skin back (i know valve won't) but to advertise other people about this kind of scam:
-He put all my friend list on "blocked" (you can unblock them on friend menu)
-he uninstall all my games
-he let chose the friend i want to trade for "safe purpose"
-my prime statue is gone... i play since cs beta 2 T_T

We should have (if it doesn't exist already) a post with all kind of scam on steam.

[Sasori Kigaru]

Originally posted by MeRToN YoLo:

I think all people here doesn't understand: it was not to get my skin back (i know valve won't) but to advertise other people about this kind of scam:
-He put all my friend list on "blocked" (you can unblock them on friend menu)
-he uninstall all my games
-he let chose the friend i want to trade for "safe purpose"
-my prime statue is gone... i play since cs beta 2 T_T

We should have (if it doesn't exist already) a post with all kind of scam on steam.

It does exist albeit not as a forum post
https://help.steampowered.com/en/faqs/view/70E6-991B-233B-A37B

Even if there was a forum post dedicated to it, most victims won't read/notice it until its already too late.

There's been tons of PSA Posts too about scams for as long as I can remember and to this day there are still people that'll fall victim to it.

Sadly there isn't any real solution that'll work. There will always be people that will fall for these kind of things and there'll be people to take advantage of them, best we can do in the meantime as users is to quickly tell people how to recover/secure their account and IF lucky enough to catch it before they fall for the scam.. Warn them about it then and there.

[76561198407601200]

Originally posted by MeRToN YoLo:

Originally posted by J4MESOX4D:

You were baited into initiating a trade whilst your account was compromised allowing the scammer to intercept it. Do the following steps to secure your account:-

1. Scan for malware {LINK REMOVED}https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Scammed items lost this way are not returned. There is no such things as Steam admins.

I know that since the scam. When is Valve going to secure is api? the scammer used a friend identity so he abused of steam system.

When are people going to stop being so gullible? After all that is the reason why scams work in the first place.

[shiel]

Originally posted by MeRToN YoLo:

I think all people here doesn't understand: it was not to get my skin back (i know valve won't) but to advertise other people about this kind of scam:
-He put all my friend list on "blocked" (you can unblock them on friend menu)
-he uninstall all my games
-he let chose the friend i want to trade for "safe purpose"
-my prime statue is gone... i play since cs beta 2 T_T

We should have (if it doesn't exist already) a post with all kind of scam on steam.

The scam is ancient. You are a poster child for my opinion that everyone who signs up for internet access, whether through a phone company or ISP, should have to do a basic computer literacy test prior to getting it.

In short, your stupidity is YOUR FAULT. It's 2024, not 2001. You being ignorant of reality is not an excuse.