全スレッド > Steam 掲示板 > Steam Community > トピックの詳細
このトピックはロックされています
Hack - Wallet balance gone
My Steam wallet was just emptied of 475 euro about 2 hours ago for apparently some cheap Dota knife worth 0.06 cents and I have never even owned or played Dota. (Or ever even used the marketplace in my 10+ years of using Steam for that matter). Why is this possible?

I'm honestly in shock and I don't know what the heck just happened. My Steam Guard was turned on. My Malwarebytes never identified any anomalies. Every time I want to log in to my Steam account myself I need to authenticate with tedious mechanisms and codes through e-mail and whatnot, but these hackers were apparently able to waltz right into my account from an unknown device without me ever even receiving an e-mail notification about it? All I got was an e-mail confirming the purchase when it already happened. I don't even understand how my account got compromised?

I haven't used phishing links, I haven't even logged into Steam in God knows how long because I only use the Windows app which always keeps me logged in.

What the hell happened here? It's incredibly suspicious on Steam's end. And why are there seemingly no checks and balances on Steam's end to recover any of the stolen funds? There isn't even an actual customer service? I've been searching for the past 2 hours for any avenues to get in contact. This is proposterous. Is there ANYTHING that I can do about this or ANYONE I can contact? What a joke.
< >
16-30 / 93 のコメントを表示
vkobe の投稿を引用:
someone in your house or someone related to you has acces to your computer ?
Nope, just me.



It's frustrating, I feel like the things I'm saying are just being handwaved away and talked past by people responding. But there's no point arguing about it. Not gonna get my 500 euros back.

Call me crazy or salty, but I really suspect now that Steam really isn't as watertight internally as people assume it to be.

Either way, it's preposterous to me that there isn't any customer support infrastructure in place to immediately remedy situations like this when they happen. Or why it's possible in the first place to purchase a 0.06 cents marketplace item for nearly 500 euros, especially on an account that has never even used the marketplace before, without it raising any red flags or security measures. Won't be using Steam for any purchases again.

Really, sincerely hope this never happens to any of you. But if it does, I hope you don't get a bunch of people insisting that nothing can possibly have been at fault but you.
vkobe 2024年6月19日 19時23分 
pulzzzz の投稿を引用:
vkobe の投稿を引用:
someone in your house or someone related to you has acces to your computer ?
Nope, just me.



It's frustrating, I feel like the things I'm saying are just being handwaved away and talked past by people responding. But there's no point arguing about it. Not gonna get my 500 euros back.

Call me crazy or salty, but I really suspect now that Steam really isn't as watertight internally as people assume it to be.

Either way, it's preposterous to me that there isn't any customer support infrastructure in place to immediately remedy situations like this when they happen. Or why it's possible in the first place to purchase a 0.06 cents marketplace item for nearly 500 euros, especially on an account that has never even used the marketplace before, without it raising any red flags or security measures. Won't be using Steam for any purchases again.

Really, sincerely hope this never happens to any of you. But if it does, I hope you don't get a bunch of people insisting that nothing can possibly have been at fault but you.
so someone hacked your computer or someone hacked your email
vkobe の投稿を引用:
so someone hacked your computer or someone hacked your email

Thoroughly scanned my devices for malware or anything of the sort and it's all clear. My e-mail appears to be secure too, 2fa activated and no anomalies in its device/login history.
Well no one l33t h4x0r'ed Steam just to get to your account. But users the world over often get fooled, or make mistakes. We're all at risk, although the more knowledgeable you are and consistently careful you are the safer you might be. But anyone can have an off day. And some people have two.
Bibo1 2024年6月19日 22時07分 
Just trying to understand, but how did you have 475 Euros on your Steam Wallet?
Accounts are PHISHED not hacked because the end user gave away all their account details. The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

Or please explain how in 19+ years i have never lost access to my Steam account and that includes before Steam Guard Email and Steam Guard Mobile existed.


Do all the following NOW to secure your account.

1. Scan for malware https://www.malwarebytes.com/

2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage

3. Change passwords from a clean computer

4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

5. Revoke the API key at https://steamcommunity.com/dev/apikey (there should be NOTHING in the APIKEY)
Are you seriously typing out all of this, deliberately just repeating the exact same things that have already been said? Or do you just blindly copy/paste this response in any topics like this that you see? Seriously what is the point? Do you even read what has been said? It's so weird.



Bibo1 の投稿を引用:
Just trying to understand, but how did you have 475 Euros on your Steam Wallet?
Does it matter? Kind of besides the point, isn't it?
pulzzzz の投稿を引用:
Are you seriously typing out all of this, deliberately just repeating the exact same things that have already been said? Or do you just blindly copy/paste this response in any topics like this that you see? Seriously what is the point? Do you even read what has been said? It's so weird.



Bibo1 の投稿を引用:
Just trying to understand, but how did you have 475 Euros on your Steam Wallet?
Does it matter? Kind of besides the point, isn't it?

They're providing you steps to take so you can secure your account properly. It is clearly compromised and you have to remember it is you, not us, who has the account issue and are simply being given advise. Believe what you will regarding security on steam however I have never had an account issue on here and outside of steam of many accounts the only time any being compromised is if the site itself doesn't have any 2fa and/or their db is compromised.
The Living Tribunal の投稿を引用:
They're providing you steps to take so you can secure your account properly. It is clearly compromised and you have to remember it is you, not us, who has the account issue and are simply being given advise. Believe what you will regarding security on steam however I have never had an account issue on here and outside of steam of many accounts the only time any being compromised is if the site itself doesn't have any 2fa and/or their db is compromised.

I already said more than once that I don't need help securing my account because that's the first thing I did when I found out. I've already gone through the steps.

I never had an account issue on here either prior to today. There's no sensible explanation as to how someone was able to circumvent Steam Guard and access my account unnoticed and without any notification.

Also I can't even look at my login history on Steam cause I just keep getting an undefined error message. It was working before, but it only lists login info from 24 hours prior and before. So I can't look at my login history to see any potential suspicious logins, and if that doesn't change by tonight I won't even be able to look up if someone did access my account in the 24 hours prior to the incident.

This all in addition to the fact that there are no real channels to get into contact with Steam to resolve issues like this that should easily be able to be resolved and from what I can see with a cursory glance are not uncommon at all, makes it so that yes, I do have my beliefs about Steam really falling short here.
pulzzzz の投稿を引用:
There's no sensible explanation as to how someone was able to circumvent Steam Guard and access my account unnoticed and without any notification.

There was no circumvention as you gave away all your account details or please explain how in 19+ years i have never lost access to my Steam account and that includes before Steam Guard Email and Steam Guard Mobile existed.
Nx Machina の投稿を引用:
pulzzzz の投稿を引用:
There's no sensible explanation as to how someone was able to circumvent Steam Guard and access my account unnoticed and without any notification.

There was no circumvention as you gave away all your account details or please explain how in 19+ years i have never lost access to my Steam account and that includes before Steam Guard Email and Steam Guard Mobile existed.

I've never lost access to my Steam account either, what is your point?

If I gave away all my account details as you keep insisting, I should still receive notification if someone is trying to access my account from an unknown device because that is the whole point of having Steam Guard activated. So yes, actually, there was a circumvention.

However, it makes no sense to begin with because I don't use and never have used third party websites or marketplaces, I've never even had or traded items at all, I only ever rarely log in on the Windows application, which I do not understand how that could be subject to phishing, never log in on another device or on another application/website, and I've detected no suspicious or anomalous activity on my devices, or my e-mail address for that matter which has 2fa and also doesn't list any suspicious logins in its login history.
pulzzzz の投稿を引用:
Shaggy の投稿を引用:
Your account was hijacked because you leaked your information somewhere.

This is just bogus and never happened.

And explain to me then how my Steam Guard was circumvented and why I never received any e-mail notification of someone trying to access my account from an unknown device, like I do every single time I try to log in myself?

This needs to be crystal clear. It's vital if you ever want to learn from this and not repeat the same mistakes.

Your account wasn't hacked.

Handle your data more responsibly.
最近の変更はHE❌ENが行いました; 2024年6月20日 11時36分
OUCH. Not gonna lie. If it happened to me I'd be pissed beyond belief.
𝕴𝖗𝖚𝖑𝖆𝖓 の投稿を引用:
This needs to be crystal clear. It's vital if you ever want to learn from this and not repeat the same mistakes.

Your account wasn't hacked.

You willingly handed over your login details. If you use a 2FA tool, you gave out that information too. Before counter this:

- Yes, it happened exactly like that.
- No, it wasn't a "hacker".
- No, nobody just took your account "like that."

Handle your data more responsibly.

It's actually not crystal clear because none of you are reasonably answering the question or even comprehending what I'm saying, just repeating yourselves and talking past it.



Thermal Lance の投稿を引用:
OUCH. Not gonna lie. If it happened to me I'd be pissed beyond belief.

Yeah, imagine my displeasure when I find out shorlty after it happened that there's no way to contact/approach Steam directly or settle for any kind of solution with them.

And to add insult to injury, when you resort to consulting the user forums for any kind of feedback you get a bunch of Steam cultists who insist that there is no shortcoming at all on the behalf of Steam's conduct in cases like this, despite this appearing to be a pretty common occurence going by what I see on the user forums, and in which it really shouldn't be difficult at all for someone on the back end to intercede or rectify.

Aside from really not understanding how the account breach happened, I'm still baffled why it's even possible for a 0.06 cents Dota knife to be purchased from the marketplace for 475 euros on an account that doesn't even own Dota or has ever played it, and that has never used the marketplace in the account's entire 10+ year existence without ANY red flags or checks or possibility to reverse. But a lot of the users here seem to think that's perfectly fine conduct.

Again, sincerely hope it never happens to any of you. And I hope the smug posters in here keep the same energy if it ever happens to them, though I genuinely hope they'll be spared that headache. I'm done giving this company my patronage, though.
What we know is, that they have a way to fake your login after getting their hands on all three infos needed once. Their way allows for them to be you and because of that you will get as much information emails and have as much to confirm when they access your account as you have - and they have to do as much confirmation as you have loging in on Windows - zero. For Steam's server, for Steam's algorithms they are you and they never actually fully log out as you don't or you would need to confirm every time you access Steam after rebooting your PC.

Their servers are simultaneously logged into hundreds of accounts if not more and only if an account has something they want either wallet funds or items they cash in. They wait on purpose so their victims can't remember when and where they gave away the information.

That you had wallet funds that high is in itself suspicious. Why would someone through legal means have so much on their account? Wallet funds are not real money. Steam is not a bank. I would bet the way that money got there has something to do with how you were phished, but that's just me guessing.

For the future:

- activate Family View, it will not help if you give away the pin as somehow you gave away your other info, but it adds another layer of security because it blocks access to community features including the market

- never accumulate wallet funds for whatever reason, just don't, not in this and not in any other store

- don't save payment information on your account

- if you want it extra safe, make sure your login isn't saved on your PC so that you and everyone able to fake you needs to use 2FA for every login

Do this even more if you do not believe the people posting here that you gave away your info in some way, because if it were a Steam problem it is even more necessary to protect your money/account.

I still wait for Gaben's account getting hacked after he gave away his username and password.

Oh and I am not one of these people who think it can never happen to me. Not long ago a call from "my bank" nearly got me. I was sick and the guy was really good at not giving me much time to think and to spark fear. Last minute I realized that I should call my bank back instead of talking to him any longer. I got lucky but I know everyone can at some point just have a brain fart and might not even realize what is happening. Everyone needs to be careful and check their risks. For example: If I ever had more than 10 Euro in my Steam wallet I would deactivate automated login, I can't even imagine sleeping well with so much money like you in store credit on any store.

I also understand your frustration and I am sorry this happend to you and that there is no recovery of the money possible. It is a terrible situation to be in.
最近の変更はA no-brainerが行いました; 2024年6月20日 12時05分
< >
16-30 / 93 のコメントを表示
ページ毎: 1530 50

全スレッド > Steam 掲示板 > Steam Community > トピックの詳細
投稿日: 2024年6月19日 17時09分
投稿数: 93