I was API scammed, what are my options.

[Jah Feel (YN)]

I was API scammed for $1000 gloves. Steam obviously wont do anything. I have the profile that took the gloves. Now he is messaging me and extorting me. Trying to get me to send him money or he will mass report my account.

He actively said he has my gloves. I mean, it is what it is. I lost the gloves I accept that. But is there any way for me to provide proof to get his account banned? Steam Level 0 brand new account. It's gonna be trade locked for a few more days so I want to take action before he starts sending the gloves from account to account.

Some of the chat
[12:32 AM]
GENERAL B:
i will just report you bro
have lots of spamming bots to report you
have enough proof now,

[12:34 AM]
Jah Feel:
of what
no worries, you'll get whats coming

[12:34 AM]
GENERAL B:
up to you, good luck your account be banned within this week or hopefully this day
goodluck with your skins

Honestly the taunting is pushing it over the edge. I actually physically want to harm this kid. But based off his typing he is in a different country.
What the fk can I do here?

[Cathulhu]

Hijacked, not hacked. You leaked your account credentials somehow.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Steam does not return inventory items or wallet funds: https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

If you no longer have access to your account, read this:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

P.S.: Keep in mind that mass reporting does not work. Valve is not run by idiots.

[Jah Feel (YN)]

Escrito originalmente por Cathulhu:

Hijacked, not hacked. You leaked your account credentials somehow.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Steam does not return inventory items or wallet funds: https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

If you no longer have access to your account, read this:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

P.S.: Keep in mind that mass reporting does not work. Valve is not run by idiots.

Was it actually my credentials that were compromised? Or just my API key? I was making a trade to an external site the trade looked 100% fine I swore I checked the steam account prior to the trade but when the trade was sent it was sent to a different account. The original trade was cancelled. And replaced with a mirrored version of the receivers steam account.

[Cathulhu]

If you didn't create the API key, then someone with access to your account created it.
By default there is no API key on a Steam account. And usually there shouldn't be any.

And the trade was changed before you confirmed it in the app. So, you didn't check it properly when authorizing it in the Steam Mobile Authenticator.

[Brian9824]

All you can do is report the account, block them, and learn. As stated the API cannot be created without someone having access to your account first. So it sounds like that third party site you gave your info to or another similar site facilitated the scam

[Jah Feel (YN)]

Yes, I created the API Key, I have since revoked it. Lesson learned. Lets hope steam follows through with the report.

[Muppet among Puppets]

Do the other safety steps as well