How to check if your Steam account has been hacked

Paranoid that your Steam account might be hacked? Clicked on a link that seemed phishy? Afraid that your Unusuals might disappear out of nowhere? This guide will help you check if your Steam account has been compromised.

Viewing your login history

The biggest indicator that your account has been hacked is if it has been logged in from someone else, somewhere else that is not you. Fortunately, Steam allows you to check when and where your account has been logged in.

Step 1

On the Steam interface, proceed to the help section on the top left corner of the screen, and click Steam Support.









If you are using via the web, the Support button can be directly accessed.

Step 2

Click "My Account"

Step 3

Click on "Data related to your Steam Account"

Step 4

Scroll all the way until you see "Recent Login History" and click it.

Step 5

You should now be viewing all your account's previous logins.
You are able to see the Login Time, Logoff Time, Operating System (OS) type, the Country, City and State your account was accessed from.

Look through the entire list to see if something does not seem right.
For example, if the login was from a city and/or state that you have not been to recently, there is a high chance you've been hacked. Immediately change your password just in case.
(Note that due to how Steam bases the location on IP, it might show a login from a state nearby yours within the same country. In this case it should be fine.)

Note that Logoff Time does not always show up, but that is not important.

The OS type indicate was type of operating system was used. I normally use Steam on my PC and my mobile phone so I should be expecting at most 2 different OS types. You may sometimes get a -1 but that is just an error.

Some values for OS type are:
16 = Windows 10
-400 = Mobile app
-700 = Web browser
-203 to -186 = Linux
-102 to -82 = Mac OS

"Looked at it, everything makes sense"

Good job! Chances are your account is safe!

"OH F@#$ IT SAYS I LOGGED IN FROM SOME OTHER COUNTRY!!!1"

If this happens, do not panic. If you have Steam Guard Mobile Authenticator and have two-factor authenticator enabled, the hacker is unable to trade your items out of your inventory, even if they have your account (unless they also hacked your phone). They are still able to make trades, but can not confirm any if it involves your items moving out of the account. Accounts without the authenticator will have a 15-day trade hold to protect the items.

You can check if this is happening by looking into your Trade Offers











Look through and see if there was a trade that you do not remember making, and quickly cancel it.
You can also look into your trade and inventory history to see if anything was lost.

Revoking Steam API Key

The Steam API key is a key unique to each account that allows outside programs to act on a steam accounts behalf. This is how trade bots are created.

Even if a scammer has access to your steam account, they don’t have access to your mobile authenticator, so they can’t just send themselves a trade, this is why they create an API key for your account. They use this key to connect your account to their program and then all they have to do is wait for you to make a trade. When you deposit an item to a trading site, the site will send you a trade offer. The scammers program will automatically decline this trade on your behalf and immediately send you a different trade from the scammers bot, made to look exactly like the bot you were going to trade with. If this trade is authenticated on your mobile, the item is sent to the fake bot and the unsuspecting user has been scammed.


To check if your account has an API key:

Logging your Steam account out of all devices

If you noticed your account being logged in from other places, you can log our account out of all devices.
Click "Account Details" from the top right corner of the interface/webpage.


Click "Manage Steam Guard"


Click this button


Change your password to prevent others from logging in again.

General tips to avoid getting scammed/hacked

NEVER click on a suspicious link sent to you by anyone. Scammers often use a fake Steam login page in order to trick people into putting in their username, password and even the special access code for new browsers.

DO NOT trade your items over to a "friend" if they promise to keep it safe for you. This is another tactic used by scammers if they do not have the ability to confirm trades, they make you do it for them. Scammers can easily copy names, profile pictures and pretend to be someone you known for a long time.

BE ALERT. If you get a random friend request from someone with no mutual friends, you should either ignore it, or proceed with caution and accept it.

[Chadilla]

Brother thank U so much, all the countries were on my account, changed everything and factory reset my pc

[dust1n ☭✯]

You can include using crack software may make steam acc get hacked too. I were cracked Autocad software for doin' my uni project (cuz I don't have money to buy license) and i got hacked my Steam acc and every single social media account. I lost 20$ in Steam wallet which is alot in my country currency and my bravo case from Counter Strike.
But thank for the guild, this happen to me week ago and I'm still traumatized it :((

[MusabJo]

that's what i did . i changed almost everything , even my smartphone cuz they got access to my social media also like twitter and instagram , i only got my steam account twitter back, instagram no longer working and got suspended
but thank you so much for the advice

[Andreng]

Sad to hear that.
Hackers can bypass Steam Authentication by using the Steam Market since no confirmation is needed to buy items on the market.
You definitely need to change your password and log your account out of every device.

[MusabJo]

i got hacked by -700 it means web browser , instead of trading , the hacker bought 2 dota 2 items from his/her alt account , an item worth of 0.03$ bought it by 15$ , steam supp couldn't bring my money back cus hacker used my steam wallet .... im in north african country , and hacker from moscow RU . now i am scared to buy games an refill my wallet

[Andreng]

Check if the login times make sense to you.

[Endangered spy crab]

What if the hacker is in the same country, or same state as you

[swedish_topG]

you saved me dady dady big ah

[Andreng]

If you removed all access and changed password, you should be safe. Check your login history everyday if you're still paranoid.

[Miniironsides]

Sorry to comment 3 years later but i recently was phished through logging in using my steam mobile authenticator qr code, noticed what was going on within 5 mins once the 'giveaway' didn't do anything and quickly reset my email, changed my password, removed access to all devices, then reset my apikey. Im wondering if order matters in the steps to remove the phisher or if i have to remove access to all devices first and then change my password.