About scammers trying you to log into with your steam credentials to vulnerable portals in order to steal crendentials

[Quldur]

I have been getting a lot of friend request from unknown players, looking at their profile tells me that it is a fabricated profile. A lot of meaningless free to play games, a lot of nick changes and overall nothing meaningful. I accept their friendship and immediately message box pops up and I see "new friend" types me, I also love x game and I play it a lot. Then you check the profile and there is no x in the inventory of the games. Then scammer tells me that there is a competition, can you please vote for my team. The scammer shares a link with you and of course the link heads you to the vulnerable portal and asks you to log into your steam account to be able to vote. Which is a trap I never fall. I am pretty sure that many of you have heard this sort of story. What is interesting is Steam has no desire to ban those scammers out of the ecosystem. They just do not care. So, I was searching for a setting where I can disable friend requests, I was not able to find one. So anyone do you think steam will put any effort to make it a little bit safer for us?

[d3str0y3r]

Originally posted by DORGON MREEFAN:

What is interesting is Steam has no desire to ban those scammers out of the ecosystem

If they have reason to believe the account is compromised they will not ban it. They simply lock the account for the owner to recover. For every account they ban, scammers have 10 more waiting to be used.

Even if you report an account, you do not know what action they took. They do not disclose that info to users.

Originally posted by DORGON MREEFAN:

So, I was searching for a setting where I can disable friend requests I was not able to find one.

There is no way to do this as of right now.

Originally posted by DORGON MREEFAN:

So anyone do you think steam will put any effort to make it a little bit safer for us?

No matter how many warnings Valve gives or how many locks they have for accounts. They cannot stop users from falling for scams and giving their login into away.

[Supafly]

1. Report the account

2. Don't accept random invites

3. There is no way to prevent invites, Either block or ignore invites as they come

4. If you have a valuable item in your Inventory hiding your Inventory in privacy settings can help reduce invites like this

[Nx Machina]

Originally posted by DORGON MREEFAN:

What is interesting is Steam has no desire to ban those scammers out of the ecosystem

Scammers use already compromised accounts, they do not use their own. The account they used IF reported is locked, so the original owner can recover it.

Originally posted by DORGON MREEFAN:

So, I was searching for a setting where I can disable friend requests I was not able to find one.

Not an option at present, and the reason you are getting friend requests is because you are in a group named Paranoid gg whose sponsor is a well known 3rd party scam skin gambling site, plus your inventory is public, not private.

Originally posted by DORGON MREEFAN:

So anyone do you think steam will put any effort to make it a little bit safer for us?

Safer? Again you are in a group named Paranoid gg whose sponsor is a well known 3rd party scam skin gambling site.

Secondly accounts are PHISHED because the end user gave away all their account details. The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to your account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible :

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And then they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

Note:

1) Only you and Steam Support know your account name until you give it away.

2) Steam passwords are hashed, not stored therefore only you can give it away.

3) They physically need to have your mobile for the code, or you need to enter the code.


And finally I have being here 19+ years and have never lost access to my account and this includes before Steam Guard email and Steam Guard Mobile existed, My Steam account is safe because i only log in to Steam.

[OPA]

Originally posted by Supafly:

2. Don't accept random invites

3. There is no way to prevent invites, Either block or ignore invites as they come

I make these two points too.

[Quldur]

@Nx Machina paranoid was a good detail. I had no idea about that. I followed it due to their servers. as I said, I am not a victim and have never been. Simply, curious if steam also wants to help.

[Lilim]

Originally posted by DORGON MREEFAN:

Then scammer tells me that there is a competition, can you please vote for my team.

There is even an official support page about that scam.

Scam: Vote for My Team