.

[MrBlaze]

.

[󠀡󠀡]

Oprindeligt skrevet af MrBlaze:

This wasn’t a typical phishing scam or clicking a malicious link. It looks like an advanced scam exploiting a vulnerability or loophole in Steam’s trade security system. I reported this to Steam support, but my tickets kept getting auto-closed. Only after multiple attempts did one remain open.

It was. Nothing about that is new and you fell for it.
Curious how your name history is riddled with scam sites. Pure coincidence, I'm sure ...

[MrBlaze]

Oprindeligt skrevet af 󠀡󠀡:

Oprindeligt skrevet af MrBlaze:

This wasn’t a typical phishing scam or clicking a malicious link. It looks like an advanced scam exploiting a vulnerability or loophole in Steam’s trade security system. I reported this to Steam support, but my tickets kept getting auto-closed. Only after multiple attempts did one remain open.

It was. Nothing about that is new and you fell for it.

Unfortunately, this time the Steam security system didn’t work as it should have, which led to this situation. I understand it might look like a typical scam, but in reality, it was a serious vulnerability that allowed the scammer to carry out this action

[󠀡󠀡]

That's plain wrong. Nothing is new. There is no "loophole" and your case isn't something "special". It's just you. Your desire to share login-credentials and the now following consequences.

[MrBlaze]

Oprindeligt skrevet af 󠀡󠀡:

That's plain wrong. Nothing is new. There is no "loophole" and your case isn't something "special". It's just you. Your desire to share login-credentials and the now following consequences.

I understand your point, but I never shared my login credentials. This wasn’t a typical phishing scam. What happened was more about a security flaw in Steam’s system that allowed a trade to go through despite active protections. I’m not making excuses, just explaining that this situation was more complex than usual

[󠀡󠀡]

You can either take care of your digital stuff ... like passwords, internet security and logins ... or keep up the deny-game and prepare for your next big encore of "Why is this happening to me?!".

Your call.

[MrBlaze]

Oprindeligt skrevet af 󠀡󠀡:

You can either take care of your digital stuff ... like passwords, internet security and logins ... or keep up the deny-game and prepare for your next big encore of "Why is this happening to me?!".

Your call.

I appreciate your advice about account security. However, in this case, I didn’t share any passwords or login info. The issue seems to be a vulnerability in Steam’s trade system that allowed this scam to happen despite my precautions. I’m taking this seriously and learning from it, but blaming the victim doesn’t solve the problem.

[󠀡󠀡]

Okay! See you again in, like, a few weeks! Probably. Definitely.

[MrBlaze]

Oprindeligt skrevet af 󠀡󠀡:

Okay! See you again in, like, a few weeks! Probably. Definitely.

Yeah, I get that I messed up. But honestly, Steam should’ve warned me properly — I had trade holds and restrictions active, yet somehow this fake admin managed to trick the system and unblock a trade. It’s not just about me being careless, it’s about Steam’s security letting me down

[Aluvard]

Hijacked. Malware or phishing.

Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Regarding items:
https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

[Satoru]

If you give a hijacker your credentials, its not an 'exploit' when they use your account to hijack your trades

[м]

Oprindeligt skrevet af MrBlaze:

Thanks for any help!

Was already mentioned, but yeah...your namehistory is full of scam websites, that's on you, not an exploit.
https://i.imgur.com/WYFMvze.jpeg

[󠀡󠀡]

Oprindeligt skrevet af MrBlaze:

it’s about Steam’s security letting me down

That is ... totally a lie.

[Lilim]

Oprindeligt skrevet af MrBlaze:

Has anyone else experienced something like this or know where I can raise more attention?

We "experience" cases like that almost every single day.

Oprindeligt skrevet af MrBlaze:

At the same time, someone pretending to be a Steam admin contacted me...

Valve employees will never communicate with you about your account using any chat system including Steam Chat and Discord.

Oprindeligt skrevet af MrBlaze:

This wasn’t a typical phishing scam or clicking a malicious link.

The scam sites in your name history say otherwise.

Secure your account (follow the steps posted by Aluvard) and remove the scam sites from your name history.

How do I remove my profile name history?

Steam stores the previous 10 names that you've used for your profile. If you'd like to clear this history, follow these instructions:

• Log in to your account and go to your profile
  
• Click the drop down arrow next to your current persona name
  
• Select clear previous aliases

All third-party sites for trading and gambling are use at own risk.

Never enter your Steam password on a third-party site!

[MrBlaze]

Oprindeligt skrevet af м:

Oprindeligt skrevet af MrBlaze:

Thanks for any help!

Was already mentioned, but yeah...your namehistory is full of scam websites, that's on you, not an exploit.
https://i.imgur.com/WYFMvze.jpeg

Yeah, I admit I made a mistake, no excuses there. But Steam should’ve notified me somehow about the trade restrictions or suspicious activity on my account. If I had gotten a clear warning from Steam, I wouldn’t have fallen for the fake admin scam.
When I saw all my friends blocked, that’s when I believed something was seriously wrong and trusted the message.

[MrBlaze]

Oprindeligt skrevet af Lilim:

Oprindeligt skrevet af MrBlaze:

Has anyone else experienced something like this or know where I can raise more attention?

We "experience" cases like that almost every single day.

Oprindeligt skrevet af MrBlaze:

At the same time, someone pretending to be a Steam admin contacted me...

Valve employees will never communicate with you about your account using any chat system including Steam Chat and Discord.

Oprindeligt skrevet af MrBlaze:

This wasn’t a typical phishing scam or clicking a malicious link.

The scam sites in your name history say otherwise.

Secure your account (follow the steps posted by Aluvard) and remove the scam sites from your name history.

How do I remove my profile name history?

Steam stores the previous 10 names that you've used for your profile. If you'd like to clear this history, follow these instructions:

• Log in to your account and go to your profile
  
• Click the drop down arrow next to your current persona name
  
• Select clear previous aliases

All third-party sites for trading and gambling are use at own risk.

Never enter your Steam password on a third-party site!

I understand that these kinds of scams happen a lot and that Valve employees don’t contact users through chat or Discord — that’s something I’ve learned the hard way.
I also realize now that the phishing sites connected to my account history confirm this was a phishing attack.

However, I still believe Steam could improve their security notifications. If I had received a clear warning about trade restrictions or suspicious activity on my account, I wouldn’t have trusted the fake admin message and fallen for this scam. When I saw all my friends blocked on Steam, that really convinced me something serious was happening.

I’m already following the steps to secure my account and clear my name history, and I’m careful about third-party sites now.
Just hoping Valve can do more to prevent this from happening to others.

Thanks again for the advice.