Someone bought an item off the marketplace on my account without being on my account

[viasteam]

Hi, somebody today at morning bought hammer for Dota for 53$, I never played Dota. Email with purchase history arrive evening. Allways i get notification after transaction within 2 minutes but there it was like 10 hours. I have steam guard active, but didnt get any confirmation ask for purchase. Login history for 2 last days is empty. For what is 2 way verification if somebody can buy something without confirmation ??? Im lucky that i havnt connected bank account for steam. Any advice what to do, if I can cancel purchase and take money back ?

[cSg|mc-Hotsauce]

โพสต์ดั้งเดิมโดย viasteam:

Hi, somebody today at morning bought hammer for Dota for 53$, I never played Dota. Email with purchase history arrive evening. Allways i get notification after transaction within 2 minutes but there it was like 10 hours. I have steam guard active, but didnt get any confirmation ask for purchase. Login history for 2 last days is empty. For what is 2 way verification if somebody can buy something without confirmation ??? Im lucky that i havnt connected bank account for steam. Any advice what to do, if I can cancel purchase and take money back ?

All steps...

Scan for malware. https://www.malwarebytes.com/ or with whatever.

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key (this should be empty) https://steamcommunity.com/dev/apikey

Read the Steam Item Restoration Policy.

[viasteam]

I made everythig, only didnt revoke api, bc dont have any.

[viasteam]

It looks like to make purchases without steam guard is much safe bc you have 15 days to cancel this. I have 2 way verification on and steam guard also active and lost money in one second without any prompt to confirm it (

[Supafly]

โพสต์ดั้งเดิมโดย viasteam:

I made everythig, only didnt revoke api, bc dont have any.

Shouldn't have an API key anyway. Hence the revoke if you have 1, if you don't then nothing needs doing .

โพสต์ดั้งเดิมโดย viasteam:

It looks like to make purchases without steam guard is much safe bc you have 15 days to cancel this. I have 2 way verification on and steam guard also active and lost money in one second without any prompt to confirm it (

There are no prompts when you buy stuff. If there was millions of us users would be pissed off. Bad enough we need to use the authenticator app to trade without restrictions.

Steam Guard is just another key. If your username, password and Steam Guard code is made available to a stranger they have access to the account. This is often by a user entering all that on a phishing website or using a compromised device

[viasteam]

Just notice, second steam account also was robbered for 1 dollar. In login history it was like 6 months before last action but somebody morning bought ♥♥♥♥ from Dota for 1 dollar. They just login to account without confirming.... probably its new way how to avoid 2 step verification.

[Supafly]

โพสต์ดั้งเดิมโดย viasteam:

They just login to account without confirming.... probably its new way how to avoid 2 step verification.

It's NOT new. Just because someone has access doesn't mean they will do something immediately. Once in the account unless you deauthorise all devices they can remain logged in.

[viasteam]

Problem is that second account was inactive about 6 months and to login here they have to enter login and password and confirmation code from email which wasnt used on mine pc. Probably they rly find new way how to avoid 2 factor confirmation.

[Mr. Smiles]

โพสต์ดั้งเดิมโดย viasteam:

Problem is that second account was inactive about 6 months and to login here they have to enter login and password and confirmation code from email which wasnt used on mine pc. Probably they rly find new way how to avoid 2 factor confirmation.

And they went after you and not say, GabeN? Or those people with like, 100 knives in CS2?

Ok...