The very helpful Steam support:

"
Hello,

If activity occurred on your account you do not recognize, it may mean your account or computer has been compromised.

Someone may have gained access to your Steam account through spoofing, phishing, or malware.

As an immediate first step, you should take some action to secure your Steam account from further access. Our article on account security recommendations is a good start toward securing your Steam account.

If you suspect your computer is infected with malware, we have some tips for removing malware from your computer here. It may be a good idea to contact a local computer security expert if you're having trouble removing this malware.

Additionally, all Community Market transactions are final and cannot be reversed or refunded. When an item is purchased from the Community Market, the cost is sent from the buyer's Steam wallet to the seller's. Reversing these purchases would mean we have to take funds out of the seller's wallet, creating confusion and possible purchasing issues across Steam.

I'm sorry we can't be of more help with this, but we don't reverse or refund Community Market purchases and sales.

Issues resolved as swift as the wolves of Icewrack!
Ilya"

""I’m sorry to hear that your account was used without your permission. I know it's frustrating to hear that we can't reverse Market activity.

To learn how to avoid scams or hijackings, please see our Trade Scam article.

To make sure that a scammer is reported, please report them through the Steam Community. Reporting a scammer through the Steam Community is the best way to prevent them from committing future scams.

Since there's not much more that I can say or do to be of help with this particular issue, I am going to close this help request.

If you have questions on an unrelated issue, please create a new help request and we will be happy to help you.

Best Regards,

Steam Support
Andrea""

2 years ago*

Comment has been collapsed.

I don't understand. Do you still have access to account?

2 years ago
Permalink

Comment has been collapsed.

Yes I have, but someone made a purchase for shitty items for all of my money.

2 years ago
Permalink

Comment has been collapsed.

Oh, I get it now. Well, that's really shit. And you can't cancel transaction on hold, right?
Also, don't expect much help from a stuff member called "Ilya" - they are most probably russian.
All you can do is protect your account from future exploitation:

  1. Go to https://store.steampowered.com/twofactor/manage and press "Deauthorize all other devices"
  2. Change password.
  3. Go to https://steamcommunity.com/dev/apikey and revoke current api key.
2 years ago
Permalink

Comment has been collapsed.

Yes I changed my password, email address, removed the auth from my mobile, api key, cleaning my pc etc.

2 years ago
Permalink

Comment has been collapsed.

Yeah it's stupid how they require a stupid 2FA code with every single sale (except the first of the day if you sell for a very low price) but don't give any protection against spending wallet funds like crazy...

2 years ago
Permalink

Comment has been collapsed.

"Steam Support has flagged your account as potentially having been used for fraudulent activities. Please contact Steam Support so that we can assist you. We suggest you to move all of your tradable items to a different steam account until we resolve this issue or else they are going to be automatically permanently removed once the ban appears on your steam account."

"On Trade Cooldown Until: Jun 2, 2022 (5:00:00)"

This shit was written by the scammer themself, not Steam support, they will never tell you to "move all of your tradable items to a different steam account" DONT DO ANYTHING WITH YOUR ACCOUNT, DO NOT TRADE OR CONFIRM ANYTHING ON THE STEAM APP

add me, I will try to help

2 years ago
Permalink

Comment has been collapsed.

Added you, thank you!

2 years ago
Permalink

Comment has been collapsed.

I've never heard of Steam telling you to move all your tradables items to a different account. That's suspicious. They might be trying to get your 2FA code so they can transfer all your items to their account. Don't do anything except try to contact Steam support first.

2 years ago
Permalink

Comment has been collapsed.

Yes I already did, thanks.

2 years ago
Permalink

Comment has been collapsed.

They are just trying to make him send trade, then, when trade is sent, it's instantly cancelled on their side and replaced by fake trade, that you are expected to confirm, since it looks the same. You'd be surprised how well this dumb scam scheme works...

2 years ago
Permalink

Comment has been collapsed.

Yea I imagine a lot of people would fall for that. Damn scammers.

2 years ago
Permalink

Comment has been collapsed.

As User2342 said, these are the scammers contacting you, not steam staff. You can view the official list of steam staff (be sure to check the ID, as the scammers can use the same name). Regardless, staff won't ask things like that.

Report the account that contacted you. Enable 2FA. Log out of all devices and change password if needed, as Ryzhehvost suggested.

I have been targeted numerous times, almost always by Chinese accounts. After a few dozen attempts, they'll leave you alone. So, just be prepared if that happens to you too.

2 years ago
Permalink

Comment has been collapsed.

Yup I was smart Steam user for so long time, then this happened to me. I learned my lesson, I was stupid sandwich.

2 years ago
Permalink

Comment has been collapsed.

What happened to get you targeted though? Did you just notice a trade? Were you buying something? Log in from a strange place? I know the most frequent attempts on me are from friend accounts sending me private messages with a link.

2 years ago
Permalink

Comment has been collapsed.

We were in the same steam group. Got an invite, I added him. Asked me to vote for his TF2 team. I just wanted to be good to him, clicked on a link and this is what I deserved. This is the end of my story.

2 years ago*
Permalink

Comment has been collapsed.

The account is mostly compromised. I suggest to stay clear from it until they resolved their issue. Any message that asks to vote for their team is most likely a scam attempt.

2 years ago
Permalink

Comment has been collapsed.

Maybe remove the link to the fake website, just in case?
thank you for this info though.

2 years ago
Permalink

Comment has been collapsed.

Removed

2 years ago
Permalink

Comment has been collapsed.

"

An average tournament scam. They will ask you to log into a site with your steam so they can steal your steam credentials. "

seems to me u tried to do more than just vote, and u got served ;)

2 years ago
Permalink

Comment has been collapsed.

Yeah a guy also asked me to vote for his TF2 team on a very suspicious looking site. I never logged in. Think i reported and blocked him too. Common scam attempt.

2 years ago
Permalink

Comment has been collapsed.

Happens to the best of us. Best be cautious in the future.

2 years ago
Permalink

Comment has been collapsed.

Steam will never contact their users via messages or outside non-official sources. I am really sorry to hear about this. I hope you get your money back. If the hacker bought games, as gift for themselves, it's probably possible to get the money refunded and their account targeted and suspended.

2 years ago
Permalink

Comment has been collapsed.

Steam don't care about it. I don't understand why you don't need confirmation if you buy something just like when you selling?? It doesn't make any sense to me.

"I’m sorry to hear that your account was used without your permission. I know it's frustrating to hear that we can't reverse Market activity.

To learn how to avoid scams or hijackings, please see our Trade Scam article.

To make sure that a scammer is reported, please report them through the Steam Community. Reporting a scammer through the Steam Community is the best way to prevent them from committing future scams.

Since there's not much more that I can say or do to be of help with this particular issue, I am going to close this help request.

If you have questions on an unrelated issue, please create a new help request and we will be happy to help you.

Best Regards,

Steam Support
Andrea"

2 years ago
Permalink

Comment has been collapsed.

Oh, I see what they did. Basically they set on sale a product and used your account to purchase it. That's such a scummy move. They can identify the seller and speculate that's the culprit I should think. If not, it's the link of that. They should investigate because you're surely not the only one that has scammed.

I've been hacked before on both my Facebook Ads and Google Store. I managed to recover the £80 from Facebook Ads, because they didn't charge me, but I never seen the £300 with Google Store hack.

2 years ago
Permalink

Comment has been collapsed.

Steam made a lot to protect you, but if you gave away login, password and 2fa code to scammers - not much they can do. And honestly, I would hate even more confirmations. There is already too much. Actually, if there were LESS confirmations - you would have been more protected. Right now steam requires 2fa code on every login, but if you use email-based steam guard - you only need to enter code once per device/browser. And this is the case when less is more - if steam only required 2fa code on new devices - users would get suspicious if phishing site would suddenly request it on the same device and browser.

2 years ago
Permalink

Comment has been collapsed.

I actually agree with this. There's more than enough security on steam. In fact if one is even a little careful about their account security, they might not even need all the measures that steam takes.
However, it's just scammers know how to fool people. They lie convincingly, creating a sate of urgency, that prompts us to act before we have the time to clearly think about it. Too bad you fell for it.

2 years ago
Permalink

Comment has been collapsed.

IT IS SCAM!!!
IF IS REAL YOU GET THIS!:
https://i.imgur.com/qhcxFOM.jpg , https://i.imgur.com/FgPWwCr.png
OR
https://i.imgur.com/4YbyywX.png
OR
https://i.imgur.com/ch8y2Ex.png (full ban)
https://i.imgur.com/aM10Tyc.png (trade ban)
https://steamcommunity.com/discussions/moderators
^ LIST of mods and suport team
https://www.reddit.com/r/Steam/wiki/scamtypes#wiki_valve_employee_impersonation
^ READ this slowly
https://steamcommunity.com/id/afarnsworth
^"Real" steam worker (info up, special barge(https://steamcommunity.com/id/afarnsworth/badges/11), special grup (invite only))
https://steamcommunity.com/groups/Valve/members
^real steam workers members!
AND REMEMBER

  • There's no such thing as appealing a pending or false report or ban.
  • There's no such thing as a pending ban.
  • There's no such thing as a pending report.
  • There's no such thing as a false or accidental report.
  • There's no such thing as item verification or item scanning.
  • There's no such thing as a Certificate of Eligibility.
  • NEVER share your account credentials, including your sign-in name and authenticator codes.
  • A Valve employee or Steam moderator will NEVER add you as a friend to talk to you about ANYTHING pertaining to your account or items.
2 years ago*
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 1 year ago.

2 years ago
Permalink

Comment has been collapsed.

Did it.

2 years ago
Permalink

Comment has been collapsed.

This is why I never leave large amounts of money on steam.
Other than the authentication with the app they need more ways to prevent stuff like this.
Like a way to disable the marketplace for people who never or rarely use it.

2 years ago
Permalink

Comment has been collapsed.

I spoke with the seller guy who also been hacked. The fraudster did it probably for fun or he just failed doesn't matter. He will give a csgo skin worth 80 Euros after 15 days (trade ban, my auth changed...)

I hope everything will be alright. Thanks guys!

2 years ago
Permalink

Comment has been collapsed.

delete link to his steam account, no witch hunts here

2 years ago
Permalink

Comment has been collapsed.

REMEMBER never, ever clicks on External link from people you just "meet"

edited. thanks.

2 years ago*
Permalink

Comment has been collapsed.

I did, no worries.

2 years ago
Permalink

Comment has been collapsed.

Closed 2 years ago by voneout.