my wallet ballence has been stolen when I enabled the 2FA, Steam guard,..everything, Steam don't care about you.
I enabled the steam guard and 2FA, and also enable the phone and email, NOW my account has been hacked for wallet balance. There's no confirmation of APP (although I received it every time when I listed the item over certain amount of money in market ) when hacker purchased using my balance.
How can I sure put my money into your Steam wallet is safe? All I need to do, I have done, but now my money lost in your company,how do you process it?
Originally posted by J4MESOX4D:
Originally posted by Lakon:
Originally posted by The Living Tribunal:
You saying you never gave away your credentials/code does not make that statement true.
Code in my Steam app from my phone and it's instant, when they take transaction of my item successfully I even not turn my steam app on! You know that what kind of this things are like?
The whole point in phishing is to ensure the victim doesn't know they have been phished until it is too late.

All you can do is secure your device and PC with the following steps:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

and also report any accounts involved.
< >
Showing 1-15 of 16 comments
Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.
Lakon Feb 4 @ 12:32am 
Originally posted by magicISO Sweden:
Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

Mate, the malware in my PC maybe for sure it can do you said, but no steam guard code and confirmation no big money deal. It make no sense hacker know the random guard code in my iphone. No code/confirmation how they hacker successfully? No way
Originally posted by Lakon:
Mate, the malware in my PC maybe for sure it can do you said, but no steam guard code and confirmation no big money deal. It make no sense hacker know the random guard code in my iphone. No code/confirmation how they hacker successfully? No way

There is no hacker, you gave away all your account details giving them access to your account.

Lets do a test.

What is my account name? What is my password?

If you guess both and get them to match i will authorise the log in.


Alternatively i will guess your account name and password.

Account name: Freedom, Blue Gem, Palico, Dragonkin etc.

Password: gTNUggh$, 123MUNMppo, ADtth678**&, QWrty*bn etc.

How close am i to gaining access to your account?
Originally posted by Lakon:
Mate, the malware in my PC maybe for sure it can do you said, but no steam guard code and confirmation no big money deal. It make no sense hacker know the random guard code in my iphone. No code/confirmation how they hacker successfully? No way

Phishing websites can simply ask for that information, and people give it away.
Lakon Feb 4 @ 12:42am 
Originally posted by FFL2and3rocks:
Originally posted by Lakon:
Mate, the malware in my PC maybe for sure it can do you said, but no steam guard code and confirmation no big money deal. It make no sense hacker know the random guard code in my iphone. No code/confirmation how they hacker successfully? No way

Phishing websites can simply ask for that information, and people give it away.

I never gave any info about my steam guard code, just a .exe malware, then Steam wallet will be unsafe? If real, I never put my money into steam wallet.
Lakon Feb 4 @ 12:46am 
Originally posted by Nx Machina:
Originally posted by Lakon:
Mate, the malware in my PC maybe for sure it can do you said, but no steam guard code and confirmation no big money deal. It make no sense hacker know the random guard code in my iphone. No code/confirmation how they hacker successfully? No way

There is no hacker, you gave away all your account details giving them access to your account.

Lets do a test.

What is my account name? What is my password?

If you guess both and get them to match i will authorise the log in.


Alternatively i will guess your account name and password.

Account name: Freedom, Blue Gem, Palico, Dragonkin etc.

Password: gTNUggh$, 123MUNMppo, ADtth678**&, QWrty*bn etc.

How close am i to gaining access to your account?
I have 2FA in my iphone!Even they know password and name, it cannot log in without 2FA code! Code in my iphone! It's safe and instant !
Originally posted by Lakon:
I have 2FA in my iphone!Even they know password and name, it cannot log in without 2FA code! Code in my iphone! It's safe and instant !

And you gave them the code to access to your account, or please explain how i have never lost access to my account in 20+ years.

Secondly how close was i to guessing your account name and password?
Last edited by Nx Machina; Feb 4 @ 12:52am
Lakon Feb 4 @ 1:00am 
Originally posted by Nx Machina:
Originally posted by Lakon:
I have 2FA in my iphone!Even they know password and name, it cannot log in without 2FA code! Code in my iphone! It's safe and instant !

And you gave them the code to access to your account, or please explain how i have never lost access to my account in 20+ years.

Secondly how close was i to guessing your account name and password?

I don't know what you said,How I gave them the code?
1. I never gave the code of steam phone guard to the pc malware or some sites,so how?
2. Ye maybe you never even give password to anyone/anysites, and set ur account to privacy,ok I know it's all based you don't trust anything about steam security guard.
your account is compromised, change every password on your pc and use malwarebyte for virus removal
Originally posted by Lakon:
Originally posted by Nx Machina:

And you gave them the code to access to your account, or please explain how i have never lost access to my account in 20+ years.

Secondly how close was i to guessing your account name and password?

I don't know what you said,How I gave them the code?
1. I never gave the code of steam phone guard to the pc malware or some sites,so how?
2. Ye maybe you never even give password to anyone/anysites, and set ur account to privacy,ok I know it's all based you don't trust anything about steam security guard.
You saying you never gave away your credentials/code does not make that statement true.
2FA is an extra security layer - it does NOT magically protect your account if you give away your credentials to phishing sites or allow them to be captured with tailored malware.
Lakon Feb 4 @ 1:31am 
Originally posted by The Living Tribunal:
Originally posted by Lakon:

I don't know what you said,How I gave them the code?
1. I never gave the code of steam phone guard to the pc malware or some sites,so how?
2. Ye maybe you never even give password to anyone/anysites, and set ur account to privacy,ok I know it's all based you don't trust anything about steam security guard.
You saying you never gave away your credentials/code does not make that statement true.
Code in my Steam app from my phone and it's instant, when they take transaction of my item successfully I even not turn my steam app on! You know that what kind of this things are like?
The author of this thread has indicated that this post answers the original topic.
Originally posted by Lakon:
Originally posted by The Living Tribunal:
You saying you never gave away your credentials/code does not make that statement true.
Code in my Steam app from my phone and it's instant, when they take transaction of my item successfully I even not turn my steam app on! You know that what kind of this things are like?
The whole point in phishing is to ensure the victim doesn't know they have been phished until it is too late.

All you can do is secure your device and PC with the following steps:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

and also report any accounts involved.
Originally posted by Lakon:
I don't know what you said,How I gave them the code?
1. I never gave the code of steam phone guard to the pc malware or some sites,so how?
2. Ye maybe you never even give password to anyone/anysites, and set ur account to privacy,ok I know it's all based you don't trust anything about steam security guard.

The person who phished you needs three things to gain access to your account.

1) Your account name.

2) Your password.

3) Authorization via the Steam Guard mobile app.

You supplied them with all three as phishing relies on you not knowing it is happening to you.


Now there are millions of possible combinations for your account name, then there are millions of combinations for password, and finally millions of possible combinations to match your account name to your password. Now ask yourself what is the possibility of them guessing both your account name and password and getting them to match? The answer is zero.

So we go back to:

I will guess your account name and password.

Account name: Freedom, Blue Gem, Palico, Dragonkin etc.

Password: gTNUggh$, 123MUNMppo, ADtth678**&, QWrty*bn etc.

How close am i to gaining access to your account? The answer is zero.

The only way for me to gain access to your account is for you to input your account name, input your password and authorise via the mobile app and i capture those details.

And finally Steam was not hacked because if it was it would be all over the internet.
Last edited by Nx Machina; Feb 4 @ 2:28am
I'm having the same issue... my $1.5 is gone and when I look at it... it has market transaction history... just recently Feb 3, 2025
< >
Showing 1-15 of 16 comments
Per page: 1530 50

Date Posted: Feb 4 @ 12:20am
Posts: 16