I'm abit paranoid so I just wanted to get some opinions on this, if you could shed some light on this for me I'd be most grateful.
So, I just checked my email and received the following email from Steam Support about 1 hour ago.

"Dear $$$$$,

This is an automated message generated by Steam account administration to help you reset your Steam password.

Please enter the following code into the 'Verification Code' field of the 'Forgotten Password' dialog. (Enter the code exactly as written. You can use copy/paste operations to enter the code):

(CODE HERE)

IMPORTANT: Please do not reply to this message to attempt to reset your password -- that won't work. You must enter the above information into the Steam application.
The Steam Support Team
http://www.steampowered.com

This notification has been sent to the email address associated with your Steam account.
For information on Valve's privacy policy, visit http://www.valvesoftware.com/privacy.htm.
This email message was auto-generated. Please do not respond."

Now the thing is, the ID that is in the email (I replaced with $$$$ just in case) is not mine so how would I get an email from another account that is not my own, could it have been an error or a bug? Should I be worried? I have Steamguard active, so if someone was to attempt to access my account I'd still get an email with a code, right?

Thanks in advance for any help!

8 years ago

Comment has been collapsed.

Are you 100% sure it's actually from Steam support?

8 years ago
Permalink

Comment has been collapsed.

Well, I think it is, it was sent from noreply@steampowered.com.

8 years ago
Permalink

Comment has been collapsed.

don't worry, if is not your correct username it means that someone is trying to fool you somehow
anyway i suggest you to change your steam account password just in case

8 years ago
Permalink

Comment has been collapsed.

Happy cake day :D We share the same anniversary date!

8 years ago
Permalink

Comment has been collapsed.

Happy cakeday to both of you !

8 years ago
Permalink

Comment has been collapsed.

Thanks ^^

8 years ago
Permalink

Comment has been collapsed.

Happy cake day ! :3

8 years ago
Permalink

Comment has been collapsed.

with so many people sending me messages i can't even track them ;-;
sorry, have an awesome pie day with a lot of booty! :D

8 years ago
Permalink

Comment has been collapsed.

It's a scam
Don't click on any links!

8 years ago
Permalink

Comment has been collapsed.

++++++1

Two things to note here: first, if you did not request a change/reset then you should never have received this. Second; if you did not request a change/reset then Steam's email would say something to the effect of do nothing and ignore the email. If you want to see what Steam's interaction in this scenario is go through their process of resetting your password as if you have forgotten it (THROUGH STEAM AND NOT THIS GARBAGE EMAIL... sorry to scream, but that is crucial).

Last thoughts, if you are ever concerned that this may or may not be legit, forward it to steam's support email and explain your concerns. They will respond and let you know. Also worth noting, that if your info is ever compromised, most clients and sites will send you an email letting you know that this has happened, but they will NEVER give you a link to fix it. Rather they will explain you will be required to reset your password the next time you access the client or login into the site. At that point they may send an email to verify identity only.

Edit: Never ever ever ever follow a link that asks you to update your password, update your account information, or update your contact information. Unless a company's security is absolute garbage (and then some) they will never ask you to do this.

8 years ago*
Permalink

Comment has been collapsed.

+1

It's good practice to never click on links, period. You can always just go to the site's homepage and start from there.

8 years ago
Permalink

Comment has been collapsed.

Definitely a scam. That's not the message Steam sends when you try to retrieve your password.

8 years ago
Permalink

Comment has been collapsed.

Was it actually sent from that address? You can make it look like any email was sent from any address you wish. Open the mail's metadata and look for the real sender there.

8 years ago
Permalink

Comment has been collapsed.

I'm pretty sure it was, it says the following:
"From: Steam Support (noreply@steampowered.com)" and it also says that this email is on my contact list.

8 years ago
Permalink

Comment has been collapsed.

Servers can mimic email addresses easily.

I work for a company that handles mass emails for political campaigns and non-profits. All emails are sent through our domain, but arrive as if they were sent through their own. Unless you know what you are doing there is absolutely zero way to tell the difference. I could use any email address to do this, and I mean any. Companies like mine do not do this of course because major hubs like Google, Yahoo, MSN, etc. can tell the difference, and as abuse (SPAM) complaints come pouring in the major hubs start forcing everything you are sending into junk boxes regardless of whether or not it is legitimate or otherwise.

Even if this had your precise account name on this, I know it is garbage. Not sure if you use PSN ever, but think about the hack they encountered last year. Now imagine getting this same email from "Playstation." Do you think there would be a chance that ill motivated hackers and the like could have acquired PSN IDs in the process? Obviously that is a rhetorical question. The point is... if you did not request this and you still have access to your account... this is a fishing email plain and simple.

8 years ago*
Permalink

Comment has been collapsed.

You can even get mails from "yourself".

8 years ago
Permalink

Comment has been collapsed.

Change your steam password immediately,may be current one was hacked somehow!

8 years ago
Permalink

Comment has been collapsed.

This is never a bad idea anyway... so long as you do it through the client and not this email.

8 years ago
Permalink

Comment has been collapsed.

Well, the email he posted says to do it through the application...I'm assuming his client. It doesn't give a link to change it....I am fairly sure it's genuine, but anyone can say they forgot someones password. Unless that someone has access to their email, it doesn't really matter.

8 years ago
Permalink

Comment has been collapsed.

Don't worry bout this, somebody watched your login only. Without password, your e-mail and e-mail password (due Steam Guard), hacker will not get your account.

8 years ago
Permalink

Comment has been collapsed.

Well the thing is, the ID showed on the email is not even mine, not the one I use to log in into Steam neither my nickname on Steam, that's the weirdest part of it all.

8 years ago
Permalink

Comment has been collapsed.

So the only way is, somebody registered account on your e-mail, but without confirmation, and now forgotten password... It's only logically answer...

8 years ago
Permalink

Comment has been collapsed.

Is that even possible? To make an account with an already used email?

8 years ago
Permalink

Comment has been collapsed.

Oh, sorry; I did not thinked bout it... Maybe it's a bug with the Steam. FOR GREATER GOOD change mailbox and password.

8 years ago
Permalink

Comment has been collapsed.

I think it is possible, or if it's not possible I believe once you do make the acc you can switch to another email (in this case they switched to yours?)

8 years ago
Permalink

Comment has been collapsed.

Yes, you can have multiple steam accounts on the same email. Maybe somebody made a typo in his email and entered your email by accident... I mean the chances of that happening... WOW! lol
Or maybe someone is just trying to mess with you by typing your email in Forgotten Password of Steam client. I think anyone can request a Forgotten password if they got somebody's email.

8 years ago
Permalink

Comment has been collapsed.

Yeah I believe you're right, anyone can ask for a new password if they have your email but still, that doesn't explain why the email had someoneone else's ID on it and not mine.

8 years ago
Permalink

Comment has been collapsed.

True, you can go back and take a look at your previous email and see if there's a new steam account sign up email. If you got a large inbox, that could take a while though!
You can create a new account and see what the email title will be for the new account and search that tittle in your inbox.

8 years ago
Permalink

Comment has been collapsed.

I have 3 accounts on my email, I think (dummy accounts because payment gave me errors on my main and I wanted to see if it's an account issue or payment method issue).
That's actually a good way for Steam to avoid lost account due to people making a disposable email for an account that will one day become the main account, but they had to do it on a dummy email just because there was another account on that mail (if you delete the mail, you probably have no way of reaching the old account, happened to me on Facebook)

8 years ago
Permalink

Comment has been collapsed.

If someone got your mail from SteamGifts, he may have done the "Forgotten Password" form with your mail.

8 years ago
Permalink

Comment has been collapsed.

While that can happen, this email wasn't sent by Steam. I've used this function many, many times, and I almost have the auto-response memorized by now.

8 years ago
Permalink

Comment has been collapsed.

There's no such thing as Steam Support.

8 years ago
Permalink

Comment has been collapsed.

Hey Zorder - I know that contacting support might take a while to get a response but please send them the email. Also, if you do change your password, do it directly from your account page - don't follow any links. BUT note that a bunch of actions will be frozen for 7-10 days (or they used to freeze stuff - dunno if that's still the case.) So if you plan to sell cards in the market etc... post them first and then change your password. Alternately, change password and do whatever once your account is fully operational again.

8 years ago
Permalink

Comment has been collapsed.

I wouldn't do it in my browser at all, change it in the client's options, just to be sure. SteamGuard will email/text you if somebody tries to get in from an unrecognised address/browser. I would forward the letter to the actual Steam Support, lacking as it is, don't click on anything in the email, send it to the trash folder and go about your day confident that you've still got your Steam account

8 years ago
Permalink

Comment has been collapsed.

Hey! I think I'm going to do that. But first, I'll let Malwarebytes finish a scan just in case something shady has made its way to my computer. Thanks for the advice!

8 years ago
Permalink

Comment has been collapsed.

Antivirus software doesn't prevent this kind of things.

8 years ago
Permalink

Comment has been collapsed.

Yeah, I found out about this the hard way yesterday, lol. I changed my e-mail for a few minutes and then changed back to the normal one... Now I can't trade for the next 4 days... I can still list items on the market though... Steam really should tell you about this before changing your E-Mail =/

8 years ago
Permalink

Comment has been collapsed.

You definitely don't want to be changing stuff right before the summer sale! :-D

8 years ago
Permalink

Comment has been collapsed.

Yup, lol =D

8 years ago
Permalink

Comment has been collapsed.

If it's really from Steam Support, then someone else used your e-mail (or thought it was his e-mail) to log-in on Steam, but probably you have Steam Guard enabled and since the other person tried to log-in from another computer/device, this confirmation code are always sent automatically to confirm that were you the person who tried to log-in into your Steam account from another place/computer. If you get another e-mail like this, then that someone else is still trying to log-in into your account. In that case if I were you, I would change my password and e-mail, if possible, just to be safe.

8 years ago
Permalink

Comment has been collapsed.

If you enter an already used product key into Steam you then get a 'retrieve account' option. Which sends an automated e-mail regarding the account that the game was activated on (in case people made an account for a retail game years ago and still have the physical copy but not the details for the account they made). I got such an e-mail one time after somebody else tried activating a game key that I had obtained in a trade, although it took me a while to work that out. I think that is the same mail you received.

8 years ago
Permalink

Comment has been collapsed.

Nah, I believe that's another type of email because I just checked and I've got those emails you mention, unless they changed the "format" I'd say it's not the same. Eitherways, thank you for reminding me of this.

8 years ago
Permalink

Comment has been collapsed.

It seemed familiar, but I'm more than happy to take your word for it! And I couldn't figure out how you had gotten it for a different Steam ID anyway. Sorry I couldn't help.

8 years ago
Permalink

Comment has been collapsed.

No need to be sorry. Like I said I'm looking for peoples opinions on this, and if I knew how that ID got into my email I wouldn't be looking for help :P

I'll make sure to update this when support gets back to me.

8 years ago
Permalink

Comment has been collapsed.

No. I got the same mail a while ago and found out, that everyone can request that by clicking "I forgot my username +pw" when logging into Steam, one option is to enter a key and whoever owns this game get the mail.

8 years ago
Permalink

Comment has been collapsed.

Yeah I know what you mean but the thing is the email I got doesn't have my ID, it has someone elses ID. If that was the case shouldn't it have my ID on it?

8 years ago
Permalink

Comment has been collapsed.

Try googling the ID? Dunno, maybe you can get some info on whether it's a legit account or what. Or if this is a scam and they've used the ID name before you might encounter someone else who has experienced this.

8 years ago
Permalink

Comment has been collapsed.

I already tried that but no luck...

Offtopic: does that cake logo next to your ID mean it's your birthday or something? If so, Happy Birthday! :)

8 years ago
Permalink

Comment has been collapsed.

Ah, darn.

The cake means it's the anniversary of the day I registered on SteamGifts. 3 years now :D Thanks for the wishes anyways.

8 years ago
Permalink

Comment has been collapsed.

If I had used "anniversary" instead of birthday I'd have been right heh. Eitherways, congrats!

8 years ago
Permalink

Comment has been collapsed.

Please check the mail message headers. "From" as well as other mail message fields can be forged.

If the email is coming from an authorized Steam mail server (you can see that in the mail headers too), that email was sent to you under some kind of error.

8 years ago
Permalink

Comment has been collapsed.

Alright, I actually didn't know that. Thanks for letting me know!

I've contacted Steam supported in an effort to try and know if it was actually some kind of error. I don't know how long they usually take to respond an email but I'll make sure to update this thread once they do.

8 years ago
Permalink

Comment has been collapsed.

For me, someone who knows your account name was trying to access your steam account. I suggest you to change your steam and e-mail passwords.

8 years ago
Permalink

Comment has been collapsed.

Very strange, it is a bit too much for bug

8 years ago
Permalink

Comment has been collapsed.

Sign in through Steam to add a comment.