Market Purchase But No Login History

[crispyto3sttv]

So recently I got a few games and had like $8 left over in my steam wallet, at 3 am last night, "I" purchased a CS:GO skin (I don't play CS:GO anymore). I went to check my login history but there isn't any logins at 3 AM or any logins anywhere else I don't live. Am I able to do something about this or did I lose $8?

[Zekiran]

you need to make sure that your account isn't compromised.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey
** If there is nothing in the API key area, that’s fine. If there IS something, remove it. Nothing should be there.**

No items that have been traded away during this time will be returned to you.

Change your Email’s password on your computer for safety

[wuddih]

so, let me assume it was a cent skin that was bought for your remaining wallet amount, called walletwipe, requires access to the account.

pre-existing sessions may not appear in login history(sessions can be valid for 30 days, with certain methods for longer). scroll more back in time to find inconsistent history entries. as you seem to be from the US, Steams geolocation should be decently accurate, so look there.

and if this was not a forgotten buy order,
Please do the following steps in order:

1. Scan for malware (with whatever)
   
2. Deauthorize all other devices
   
   • https://store.steampowered.com/twofactor/manage
3. Generate new backup codes
   
   • https://store.steampowered.com/twofactor/manage
4. Change your Steam account password, preferably from a known safe device.
   
5. Revoke API key
   
   • https://steamcommunity.com/dev/apikey

[shogun]

hm sorry dk

[J4MESOX4D]

You have a Rust scam site in your name history too so i suggest you do the steps provided above without fail and stop giving away your credentials to phishing sites.