Confirm purchases via mobile authenticator

[ImagineSniping_]

hi steam, and people reading this.

We should have "Purchase confirmation" option.
When we enable it we have to confirm every Steam purchase via mobile Authenticator.

If you have kids or someone playing games on your PC, they can easily purchase game, community market item or in-game currency/item in few seconds without any confirmations.

Or if someone gets unauthorized access to your account, they can spend all your wallet money. what happend 2 times to me already...

"airborne item" https://prnt.sc/wanlUIpO3ji0

"guard of the first hunt" https://prnt.sc/u38wlAENxrc6

both items didnt get bought by me, or someone on my pc using it. it just randomly happend while i was sleeping....

now i lost 100 euro for 2 items that together not even is 1 euro worth.. and the fun part i dont even play those games...

the "airborne attire" i had 100 euro on steam for maybe buying elden ring at the time. the day after i woke up all my money gone for a 30 cent item....

the "guard of the first hunt" i had 15 euro from selling some counter strike skins, and i just leave the funds on my account. but again after a week something got bought with it randomly.

yes i resetted my pasword, yes i logged out on every device, yes i changed my api key, yes i removes 2step and enabled it again so idk why it happend again...

Mobile confirmations would help preventing that from happening.



so steam can you please look at this?

it does not have to be a permanent thing, but just something you can enable if you want this or not.

i see a lot of youtube videos, that this happening to them aswell. when they have funds on their account for a week and after that week it buy something for a ridiculous price like the pictures above.

videos: https://www.youtube.com/watch?v=nKj15DZd7Vc / https://www.youtube.com/watch?v=_uabBO78UHA

regards,
imaginesniping_

[cSg|mc-Hotsauce]

Turn on Family View.

https://help.steampowered.com/en/faqs/view/6B1A-66BE-E911-3D98

[Crazy Tiger]

For starter don't let anyone else on your account. Don't attach payment methods to the accounts of your kids. Always done that with my kids, any games they wanted they had to get through me. As in I purchased and gifted them.

Also, if your account has been compromised 2 times already, you need to seriously rethink the way you handle internet and account security.

While I can sorta understand the premise of the suggestion, the issue is PEBCAK in all of this.

[ImagineSniping_]

Originally posted by cSg|mc-Hotsauce:

Turn on Family View.

https://help.steampowered.com/en/faqs/view/6B1A-66BE-E911-3D98

:winterbunny2023:

hi yh family view doesnt help in my situation, someone out of my house has acces to my steam wallet and every time i leave money on my account for over a week it buys a random dota 2 item or team fortress item. why this happend idk

[ImagineSniping_]

Originally posted by Crazy Tiger:

For starter don't let anyone else on your account. Don't attach payment methods to the accounts of your kids. Always done that with my kids, any games they wanted they had to get through me. As in I purchased and gifted them.

Also, if your account has been compromised 2 times already, you need to seriously rethink the way you handle internet and account security.

While I can sorta understand the premise of the suggestion, the issue is PEBCAK in all of this.

hi well the thing is i dont login on random sites with steam i have 2step enabled on my account aswell and it just happens when i leave money on my acc for over a week then suddenly it buy something from dota2 or team fortress and no it aint buyorders or something its weird and idk how this is happening

[Crazy Tiger]

Originally posted by ImagineSniping_:

Originally posted by Crazy Tiger:

For starter don't let anyone else on your account. Don't attach payment methods to the accounts of your kids. Always done that with my kids, any games they wanted they had to get through me. As in I purchased and gifted them.

Also, if your account has been compromised 2 times already, you need to seriously rethink the way you handle internet and account security.

While I can sorta understand the premise of the suggestion, the issue is PEBCAK in all of this.

hi well the thing is i dont login on random sites with steam i have 2step enabled on my account aswell and it just happens when i leave money on my acc for over a week then suddenly it buy something from dota2 or team fortress and no it aint buyorders or something its weird and idk how this is happening

You got your account compromised via phishing or malware (for example internet cafe for latter), that's how.

Secure your account.

[ImagineSniping_]

Originally posted by Crazy Tiger:

Originally posted by ImagineSniping_:

hi well the thing is i dont login on random sites with steam i have 2step enabled on my account aswell and it just happens when i leave money on my acc for over a week then suddenly it buy something from dota2 or team fortress and no it aint buyorders or something its weird and idk how this is happening

You got your account compromised via phishing or malware (for example internet cafe for latter), that's how.

Secure your account.

i resetted my pasword, i logged out on every device, i changed my api key, i removes 2step and enabled it again ? what else can i do ? thats everything right ?

[Crazy Tiger]

Originally posted by ImagineSniping_:

Originally posted by Crazy Tiger:

You got your account compromised via phishing or malware (for example internet cafe for latter), that's how.

Secure your account.

i resetted my pasword, i logged out on every device, i changed my api key, i removes 2step and enabled it again ? what else can i do ? thats everything right ?

This is all:

Originally posted by Crazy Tiger:

Phishing is the most likely cause, OP. When people get phished, they give out the account name, password and then active guard code. A bot quickly enters it and hijackers have access then. Ultimately 2FA is "just another code" that can be given away when getting phished. It's not a magical defense layer.

Have you secured your account? If not:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Find out how you leaked your credentials. Phishing and malware are the two ways it happens, phishing is the most likely one. Either way, find out how you leaked your credentials.

Items are gone, they do not get returned nor will you get money back for them. The item restoration policy: https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

Not all items require confirmation. https://steamcommunity.com/groups/community_market/announcements/detail/1705067494681435160

[ImagineSniping_]

Originally posted by Crazy Tiger:

Originally posted by ImagineSniping_:

i resetted my pasword, i logged out on every device, i changed my api key, i removes 2step and enabled it again ? what else can i do ? thats everything right ?

This is all:

Originally posted by Crazy Tiger:

Phishing is the most likely cause, OP. When people get phished, they give out the account name, password and then active guard code. A bot quickly enters it and hijackers have access then. Ultimately 2FA is "just another code" that can be given away when getting phished. It's not a magical defense layer.

Have you secured your account? If not:
- Scan for malware. https://www.malwarebytes.com/
- Deauthorize all devices https://store.steampowered.com/twofactor/manage
- Change your password on a secure device.
- Generate new back up codes. https://store.steampowered.com/twofactor/manage
- Revoke the api key https://steamcommunity.com/dev/apikey

Find out how you leaked your credentials. Phishing and malware are the two ways it happens, phishing is the most likely one. Either way, find out how you leaked your credentials.

Items are gone, they do not get returned nor will you get money back for them. The item restoration policy: https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

Not all items require confirmation. https://steamcommunity.com/groups/community_market/announcements/detail/1705067494681435160

did all of this i hope it works

[Carlomagno]

puede ser pan?