Steam check

[colldem]

I received a message from a Steam employee that the account needs verification. I did everything, selected everything, uploaded my things to the cloud account as I was told. It says the verification will take a few minutes. It's been 1.5 hours now. What should I do?

[Ogami]

Congratulations you got scammed and all your items have been stolen.
There is no such a thing as a account needing verification or someone needing to check your items.
Its one of the oldest scams in the book on Steam.

Read this for the future: ( especially the "impersonation" and "Verifying Items" tab)
https://steamcommunity.com/sharedfiles/filedetails/?id=1261293152

Also do all of this to secure your account:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Again , learn from it for the future, your items are sadly gone and Steam will not restore them.

[colldem]

I know about this, but here the situation is different, my profile deleted all the tweets in seconds, added only one (the one who wrote), and I got a sign in my profile that the account is under review

[colldem]

Originally posted by Ogami:

Congratulations you got scammed and all your items have been stolen.
There is no such a thing as a account needing verification or someone needing to check your items.
Its one of the oldest scams in the book on Steam.

Read this for the future: ( especially the "impersonation" and "Verifying Items" tab)
https://steamcommunity.com/sharedfiles/filedetails/?id=1261293152

Also do all of this to secure your account:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Again , learn from it for the future, your items are sadly gone and Steam will not restore them.

I know about this, but here the situation is different, my profile deleted all the tweets in seconds, added only one (the one who wrote), and I got a sign in my profile that the account is under review


you can look at my profile and check it out

[rawWwRrr]

Originally posted by colldem:

I know about this, but here the situation is different, my profile deleted all the tweets in seconds, added only one (the one who wrote), and I got a sign in my profile that the account is under review

It's not different. The account is compromised. If you still have access to the account, follow the steps in Ogami's reply to re-secure it.

[rawWwRrr]

Originally posted by colldem:

you can look at my profile and check it out

The hijacker put that there. You can go into your profile editor and remove it.

[Nx Machina]

Once you have followed all the steps in post #1 you can remove the fake message about your account being verified.

Secondly that site in your profile name history self endorses itself as being legit which is a red flag and the domain changes frequently.

Trade only on Steam and not 3rd party gambling skin scam sites.

[colldem]

Originally posted by rawWwRrr:

Originally posted by colldem:

I know about this, but here the situation is different, my profile deleted all the tweets in seconds, added only one (the one who wrote), and I got a sign in my profile that the account is under review

It's not different. The account is compromised. If you still have access to the account, follow the steps in Ogami's reply to re-secure it.

But then why do I have this inscription on my account, and how do I remove it?

[Nx Machina]

Accounts are PHISHED because the end user gave away all their account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code, or scanning the QR code or authorising via fingerprint giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link, signing in through a fake login window etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

The weakest link is the end user, not the security offered.