Install Steam
login
|
language
简体中文 (Simplified Chinese)
繁體中文 (Traditional Chinese)
日本語 (Japanese)
한국어 (Korean)
ไทย (Thai)
Български (Bulgarian)
Čeština (Czech)
Dansk (Danish)
Deutsch (German)
Español - España (Spanish - Spain)
Español - Latinoamérica (Spanish - Latin America)
Ελληνικά (Greek)
Français (French)
Italiano (Italian)
Bahasa Indonesia (Indonesian)
Magyar (Hungarian)
Nederlands (Dutch)
Norsk (Norwegian)
Polski (Polish)
Português (Portuguese - Portugal)
Português - Brasil (Portuguese - Brazil)
Română (Romanian)
Русский (Russian)
Suomi (Finnish)
Svenska (Swedish)
Türkçe (Turkish)
Tiếng Việt (Vietnamese)
Українська (Ukrainian)
Report a translation problem
Secure your account, do these steps NOW and don't trade:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey
Account security is the responsibility of the account holder. Read up on phishing so this doesn't happen again.
Items are gone, they do not get returned. The item restoration policy: https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003
You were not talking to a Steam representative. It was just the scammer himself.
I never said I was talking to a steak rep. I did get mass reported. After 2 minutes there were multiple comments on my profile saying not to trade with me as I'm a scammer. I made my profile private and was given a Notification on STEAM that my account has been restricted
That pop-up was fake.
Phishing is a very common way that people get their account compromised. Steam guard is just another code and when you get phished you give away login name, password and then active guard code. A bot will immediately log in on the account.
Malware is another.
The scam is that they want you to initiate a trade, which they cancel in the background and replace with a trade to an account of their own that impersonates your friend. They can do that because they have access to your account. They need you to initiate and confirm the trade, which you did as per your own admission.
This is a very common scam.
Some time in the past you probably entered your steam account name/password/steam guard code into a fake steam login page.
* Do you trade/gamble on 3rd part sites?
* Did a friend ask you to vote for him/his team?
* ??? Something else.
He then used those to login himself to your account.
One of the things he did was to add an API key to your account, which allowed him to intercept the trade you intended to do with your friend. He cancelled the trade, and created a new one that made you trade with him instead.
His account was made to look like your friends, with the same name, profile pic etc. so you didn't notice.
A Trade API scam usually works as follows:
The scammer gets your Steam Web API Key. This is obtained when you log into a Fake Steam log in on a scam website.
The next time you make a trade, the scammer (a bot) uses this API key to cancel the trade.
The scammer (a bot) sets up another profile that looks exactly like the account you're trying to trade to. It creates a new trade to this bot account, this all happens very fast.
You hit accept on your Mobile Authenticator, and the scam is done - congratulations! you've just sent your items to an unknown 3rd party!
Scammed items are not returned.
Morel of the story... Stop using trading sites outside of Steam, they are all scams.
There is some text left on your profile, that the scammer entered. (using the normal function to edit your profile. ) Did it say something about you being restricted before?
You can edit this text yourself, and so can the scammer because he's still logged into your account.
Make sure to do the steps listed by Crazy Tiger in post 2.
That's not Valve. Valve does not and has no reason to communicate to you using your profile description. They have a ticket system and community messages for this.
Secure your account, and stop giving away your account credentials to third parties.