A Russian hacked into my account and bought a bunch of DOTA 2 stuff!

[Radio Freeman Guy man]

The title says all.

I tried changing my password, but even after that the Russian tried to refund one of my games for more money to buy a bunch of the same thing! Luckily, I didn't have a credit card tied to my account, only gift cards. Is it possible that I'll have to delete my account? If so, how will I be able to keep my games?

I already know I can't get my money back.

[Callahan420]

Secure the account

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

Stop using third party skin trading/gambling scam sites or clicking suspicious links

[Radio Freeman Guy man]

The Russian never attempted to change my password, thankfully.