Possible scam?

[AkiraSO4]

Someone added me and claimed they accidentally banned me on CSGO or TF2 (games I never touched) and if I didn't talk to a Steam admin on Discord (because Steam is known for doing that LOL), I'd get my account banned/deleted. Now I didn't click any links, or speak to anyone on Discord, reported said user, and did change my password and got took out all devices on Steam Guard. So could this be a scam? Am I safe? Anthing else I gotta watch out for?

[Wolf Knight]

its a scam, report the accounts involved

steam accounts are reported thru their profile
discord accounts are reported to discord

if you feel your account may have been compromised


Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[Aluvard]

Scam. If they told you who you need to contact on Discord - report that guy there too.

Other than that, follow instructions from @Wolf Knight post.

[AkiraSO4]

Okay, minor update

Malwarebytes came clean
I changed passwords, and deauthorized every single device
Generated a new backup code, and finally revoked the API key
Email changed too

So I'm good to go now, I presume?

(Final update: Did everything according to Wolf Knight's post, and double-checked it. Thanks to everyone who commented it, hope more people can see this so they don't fall for it like I almost did.)

[Knee]

Początkowo opublikowane przez AkiraSO4:

Okay, minor update

Malwarebytes came clean
I changed passwords, and deauthorized every single device
Generated a new backup code, and finally revoked the API key

So I'm good to go now, I presume?

Last thing left to do is to tell the person that added you to step on a rake

[Aluvard]

Początkowo opublikowane przez AkiraSO4:

Okay, minor update

Malwarebytes came clean
I changed passwords, and deauthorized every single device
Generated a new backup code, and finally revoked the API key

So I'm good to go now, I presume?

Yes, you should be.

You had an active API key?

[AkiraSO4]

Początkowo opublikowane przez Aluvard:

Początkowo opublikowane przez AkiraSO4:

Okay, minor update

Malwarebytes came clean
I changed passwords, and deauthorized every single device
Generated a new backup code, and finally revoked the API key

So I'm good to go now, I presume?

Yes, you should be.

You had an active API key?

No, never messed with that before

[vkobe]

Początkowo opublikowane przez AkiraSO4:

Someone added me and claimed they accidentally banned me on CSGO or TF2 (games I never touched) and if I didn't talk to a Steam admin on Discord (because Steam is known for doing that LOL), I'd get my account banned/deleted. Now I didn't click any links, or speak to anyone on Discord, reported said user, and did change my password and got took out all devices on Steam Guard. So could this be a scam? Am I safe? Anthing else I gotta watch out for?

yes report this guy, screenshot the chat window and send proof to steam support

[SLG]

But you said finally revoked API key.

[AkiraSO4]

Początkowo opublikowane przez Lee:

But you said finally revoked API key.

Because I never did it earlier xD It was empty, just like Wolf Knight mentioned, so I made one, should I undo it now? Sorry for the confusion, non-English speaker here

[Wolf Knight]

Początkowo opublikowane przez AkiraSO4:

Początkowo opublikowane przez Lee:

But you said finally revoked API key.

Because I never did it earlier xD It was empty, just like Wolf Knight mentioned, so I made one, should I undo it now? Sorry for the confusion, non-English speaker here

if you have something in the APIKEY, revoke it. normal users have no reason to have anything in that field.

[AkiraSO4]

Początkowo opublikowane przez Wolf Knight:

Początkowo opublikowane przez AkiraSO4:

Because I never did it earlier xD It was empty, just like Wolf Knight mentioned, so I made one, should I undo it now? Sorry for the confusion, non-English speaker here

if you have something in the APIKEY, revoke it. normal users have no reason to have anything in that field.

Done, thanks again

[Lilim]

Początkowo opublikowane przez AkiraSO4:

Someone added me and claimed they accidentally banned me on CSGO or TF2 (games I never touched) and if I didn't talk to a Steam admin on Discord (because Steam is known for doing that LOL), I'd get my account banned/deleted.

There is even an official support page about this scam.

Scam: I Have Been Reported and Will Be Banned

[J4MESOX4D]

Początkowo opublikowane przez AkiraSO4:

Someone added me and claimed

Scam. Don't even need to read any more.