My steam account has been hacked 4 times in the past 2 months bypassing my steam guard

[Kyno ❄]

I have no clue what to do my steam account keeps on being hacked. They delete my whole profile. and log me out of games & try to change my email. (I always change it before they can) but they come back weeks later. What can I do to stop them from accessing my account? They put a profile summary saying I am VAC banned but it's all a lie. This time a big message occurred on my screen mid-CS2 game stating "AI is now closing down your game" and a fake Steam employee messaged me and was able to take items from my inventory as "Proof" they were admins. I'm at a complete loss for what to do. Please help.

[J4MESOX4D]

Either stop giving away your credentials to scam sites or kick the hijackers out by adequately securing your account. Do the following steps:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey

If you haven't done the above including step 3 then the scammers were just idle-sitting on your account the whole time with botted access.

[Bloody Moon]

4 times? Lol
Maybe you should ask yourself if it's time to stop logging in on other sites or sharing your Steam login information. Fake steam employee took your items because you gave him your account login details and 2FA, via private chat, you're such a fool and don't seem very smart to me.

1. Scan for malware https://www.malwarebytes.com/
2. Deactivate all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your mobile app https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[Unn4m3d (♥AUT♥)]

Your account has been "hacked" exactly 0 times. You either gave your account information away multiple times, or you did it once and never did the steps that were provided here.
Meaning the hijackers always had access.

[nullable]

Originally posted by Kyno ❄:

IWhat can I do to stop them from accessing my account?

Let's start with what you'e done to secure your account.

[fwah]

Is your password abc123

[Boris Kalashnikov]

Is your password abc123

[Kyno ❄]

Originally posted by Bloody Moon:

4 times? Lol
Maybe you should ask yourself if it's time to stop logging in on other sites or sharing your Steam login information. Fake steam employee took your items because you gave him your account login details and 2FA, via private chat, you're such a fool and don't seem very smart to me.

1. Scan for malware https://www.malwarebytes.com/
2. Deactivate all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your mobile app https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

I completely agree I am unknowledgeable in this and that's my fault. Thank you for posting the steps to help I appreciate it. The fake "Steam employee" has put the skins back into my account somehow. How would they get past my Steam 2FA though? I'm baffled by this.

[J4MESOX4D]

Originally posted by Kyno ❄:

Originally posted by Bloody Moon:

4 times? Lol
Maybe you should ask yourself if it's time to stop logging in on other sites or sharing your Steam login information. Fake steam employee took your items because you gave him your account login details and 2FA, via private chat, you're such a fool and don't seem very smart to me.

1. Scan for malware https://www.malwarebytes.com/
2. Deactivate all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your mobile app https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

I completely agree I am unknowledgeable in this and that's my fault. Thank you for posting the steps to help I appreciate it. The fake "Steam employee" has put the skins back into my account somehow. How would they get past my Steam 2FA though? I'm baffled by this.

You would've either approved a login after they initially phished your credentials or you've been hijacked for some considerable time from when a code was only required and you entered a full credential set into a phishing window and these were captured and login-botted into a real client and the scammers just sat on a login-session for months/years. If you didn't initially deauthorise the first time you were compromised then the scammers had access to your account the entire time no matter what password changes you made.

[Kyno ❄]

Originally posted by J4MESOX4D:

Originally posted by Kyno ❄:

I completely agree I am unknowledgeable in this and that's my fault. Thank you for posting the steps to help I appreciate it. The fake "Steam employee" has put the skins back into my account somehow. How would they get past my Steam 2FA though? I'm baffled by this.

You would've either approved a login after they initially phished your credentials or you've been hijacked for some considerable time from when a code was only required and you entered a full credential set into a phishing window and These were captured and login-botted into a real client and the scammers just sat on a login-session for months/years. If you didn't initially deauthorise the first time you were compromised then the scammers had access to your account the entire time no matter what password changes you made.

what would be the step to make sure this is stopped now? I've de-authorised all accounts is that all? I also have to re-install my games since they have accessed my account

[J4MESOX4D]

Originally posted by Kyno ❄:

Originally posted by J4MESOX4D:

You would've either approved a login after they initially phished your credentials or you've been hijacked for some considerable time from when a code was only required and you entered a full credential set into a phishing window and These were captured and login-botted into a real client and the scammers just sat on a login-session for months/years. If you didn't initially deauthorise the first time you were compromised then the scammers had access to your account the entire time no matter what password changes you made.

what would be the step to make sure this is stopped now? I've de-authorised all accounts is that all? I also have to re-install my games since they have accessed my account

As long as you've done all the steps you are secure as long as you don't leak your credentials or install tailored malware on your device. No need to re-install games because they haven't been sat at your PC.

[Kyno ❄]

Originally posted by J4MESOX4D:

Originally posted by Kyno ❄:

what would be the step to make sure this is stopped now? I've de-authorised all accounts is that all? I also have to re-install my games since they have accessed my account

As long as you've done all the steps you are secure as long as you don't leak your credentials or install tailored malware on your device. No need to re-install games because they haven't been sat at your PC.

Thank you I appreciate all the help. You've been great

[J4MESOX4D]

Originally posted by Kyno ❄:

Originally posted by J4MESOX4D:

As long as you've done all the steps you are secure as long as you don't leak your credentials or install tailored malware on your device. No need to re-install games because they haven't been sat at your PC.

Thank you I appreciate all the help. You've been great

No problem!