Prevent account theft

[木贵子死光光]

As a loyal Steam user, I feel frustrated that purchases on the Steam Community Market do not require mobile authenticator verification. The purpose of Steam's mobile authenticator confirmation mechanism is to ensure transaction security. However, account hackers exploit this by purchasing low-priced items at unreasonably high prices to transfer stolen funds. I hope Steam will implement a mechanism in the future where all transactions on the Steam Community Market require mobile authenticator verification. Thank you.

[magicISO Sweden]

99% of those so called account hackers is thx to ppl using third party market and sites and then their account be taken over and ppl dont learn from it so tell those ppl stop doing that ;)

[HikariLight]

Accounts don't get hacked, they get highjacked.

Those users gave away their login info either via a scam site or via a bad actor tricking them.

And as a heads up, ALL third party trade sites are scam sites.

The weak point is ALWAYS the user.

GabeN (the founder and owner of Valve) has made his login username and password public, but without his 2FA code (that he keeps secret) no one can get into his account.

[木贵子死光光]

Originally posted by HikariLight:

Accounts don't get hacked, they get highjacked.

Those users gave away their login info either via a scam site or via a bad actor tricking them.

And as a heads up, ALL third party trade sites are scam sites.

The weak point is ALWAYS the user.

GabeN (the founder and owner of Valve) has made his login username and password public, but without his 2FA code (that he keeps secret) no one can get into his account.

"I did not log in to any third-party websites. My balance was transferred because I logged in on an internet cafe computer. I think it's very unreasonable that Steam Market purchases don't require two-factor authentication."

[木贵子死光光]

Originally posted by magicISO Sweden:

99% of those so called account hackers is thx to ppl using third party market and sites and then their account be taken over and ppl dont learn from it so tell those ppl stop doing that ;)

I did not log in to any third-party websites. My balance was transferred because I logged in on an internet cafe computer. I think it's very unreasonable that Steam Market purchases don't require two-factor authentication.

[Mr. Smiles]

Originally posted by 木贵子死光光:

Originally posted by magicISO Sweden:

99% of those so called account hackers is thx to ppl using third party market and sites and then their account be taken over and ppl dont learn from it so tell those ppl stop doing that ;)

I did not log in to any third-party websites. My balance was transferred because I logged in on an internet cafe computer. I think it's very unreasonable that Steam Market purchases don't require two-factor authentication.

Still your fault. Don't use your account on a shared PC or PC you can't trust.

[Nx Machina]

Accounts are PHISHED not hacked because the end user gave away all their account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code, or scanning the QR code or authorising via fingerprint giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.


You are responsible for your account's security.

https://store.steampowered.com/subscriber_agreement

C. Your Account (snipped)

You are responsible for the confidentiality of your login and password and for the security of your computer system. Valve is not responsible for the use of your password and Account or for all of the communication and activity on Steam that results from use of your login name and password by you, or by any person to whom you may have intentionally or by negligence disclosed your login and/or password in violation of this confidentiality provision.

[HikariLight]

Originally posted by 木贵子死光光:

Originally posted by HikariLight:

Accounts don't get hacked, they get highjacked.

Those users gave away their login info either via a scam site or via a bad actor tricking them.

And as a heads up, ALL third party trade sites are scam sites.

The weak point is ALWAYS the user.

GabeN (the founder and owner of Valve) has made his login username and password public, but without his 2FA code (that he keeps secret) no one can get into his account.

"I did not log in to any third-party websites. My balance was transferred because I logged in on an internet cafe computer. I think it's very unreasonable that Steam Market purchases don't require two-factor authentication."

You are still at fault then for using a computer you did not have full control over.

Never log into your Steam account on a public computer.
You never know what kind of keyloggers or other programs might be there to steal you info.

[Hamless Hog]

Originally posted by 木贵子死光光:

As a loyal Steam user, I feel frustrated that purchases on the Steam Community Market do not require mobile authenticator verification. The purpose of Steam's mobile authenticator confirmation mechanism is to ensure transaction security. However, account hackers exploit this by purchasing low-priced items at unreasonably high prices to transfer stolen funds. I hope Steam will implement a mechanism in the future where all transactions on the Steam Community Market require mobile authenticator verification. Thank you.

Steam accounts cant be hacked btw.