Anyone had a similar situation recently?

EDIT: OK, finally I got refunded the money he spent on my steam wallet.

Apparently they do this just once if your account gets hacked...

I mean I understand they don't have a 100% sure way to detect if you're actually pretending you got stolen when you did it yourself or let a friend to do it... so they avoid you to exploit that.

I'm thinking if they've even punished the hacker by deleting that money from his account... I guess not since theyre actually selling digital goods which if it was a skin, they have no cost at all to just create as many copies as they wish + they can delete the games he purchased from his account in case he spent the money that way...

That implies they're promoting hackers to keep doing their thing...?

9 years ago*

Comment has been collapsed.

My initial guess would be no. Hopefully it wasn't a large amount.

I would advise you to enable SteamGuard on your account so it doesn't happen again.

9 years ago
Permalink

Comment has been collapsed.

If that was "your first theft", Valve probably will give you your items and money back.

But then, it probably depends if you had
a) SteamGuard
b) mail confirmation enabled.

9 years ago
Permalink

Comment has been collapsed.

who knows... valve have become really vicious and mean-spirited in helping victims of scams over the past few months... they're really pulled back and shut down their efforts and taken a 'its your own fault' stance recently...

9 years ago
Permalink

Comment has been collapsed.

Yep, I have a 3 month old unanswered ticked at Steam.
And I'm too stubborn to close it myself.
I also contacted Daedalic 2 months later in hopes they would help, even though it's not raely their problem. But It involves a bunch of their titles.

9 years ago
Permalink

Comment has been collapsed.

both things were enabled for a long while...it was my fault ofc, i just didn't pay attention:

I got invited to join a TS3 server in order to play a match in csgo.
As soon as I launched TS3 there was an update popup. I closed it.
When I tried to join the server another popup claiming an update was needed and then I went for it.
I was distracted and I executed everything so quickly.
They didn't need to hack my email nor my password, they used my own session from my own computer to do so...
You might think its a really dumb move by my part (which it is) but im normally really careful.

9 years ago
Permalink

Comment has been collapsed.

That is what they do it for,in hopes someone is foolish and does not pay attention as usually those are the ones with the most to lose,as if you get some random newbie to steam most of the time they have little for you to take as they are new to steam,usually ones like you are a lot harder to trick..but when they do they usually have a lot more to gain.

But as with anything in life all it takes is once to make it happen.

You did it,you learned from it i hope and you move on,as far as getting your wallet back i would not get to excited as usually they do not refund that this is one reason to not carry a wallet unless you really need it for something.

Now that you have to pay to access stuff on a new account i can not suggest what i use to and make a dupe account that you store all your stuff on and your main account could still be used but if anything should happen you will still have your stuff,as with the dupe account the only time you will access it is when you want something,and if you make the profile private and use steam guard it is pretty hard for anyone get gain access.

Good luck and i hope everything works out

9 years ago
Permalink

Comment has been collapsed.

but what was that update? i mean, can they send you something to keylog or use a remote session?

just curious because i have no idea how that works.

9 years ago
Permalink

Comment has been collapsed.

well this is just a guess from what i saw happening:

As soon as I executed it, my steam disappeared, when i tried to reopen it through the shortcut, it said the exe it was pointing to was no longer there.
He didn't need my password nor my email for steam guard or anything, so I guess that malware simply granted him a remote session to my currently open steam session on my own computer.

I locked my account within 10 minutes, but he already spent all my steam wallet and attempted to change my email & password.

9 years ago
Permalink

Comment has been collapsed.

ah, thanks for the explanation. that really sucks.

9 years ago
Permalink

Comment has been collapsed.

The "teamspeak scam" is a popular one. Instead of 'update' it is normally used with an 'error' popup. The owner of every teamspeak server can make something popup on your screen once you join the server. The scam works like this:

  1. A random guy adds you with a high level profile, many games and many friends.
  2. The person says that they played CS:GO with you in the recent week.
  3. You believe them.
  4. The scammer then says that you are great at it and they want to play an 'elite' game with you where you can potentially earn some money from.
  5. They say that you must have teamspeak to play though.
  6. Open teamspeak, Join server get the popup.
  7. Open popup, Your steam instantly shuts down and you are obliged to redownload steam. In that time the scammer simply puts one of his shit inventory items up for sale at the amount that the victim (MCVAGINA) had and uses that account to purchase it.

Poof. Money gone. Scammer gone. No money. I don't know if this is against the rules to show the entire scam but please tell me if I did.

Ps. MCVAGINA Steam can't refund you your money Unless you have solid proof...

9 years ago
Permalink

Comment has been collapsed.

but nothing detects the exe/javascript or whatever runs when you click on the link? antivirus or antimalware? no confirmation either to run it?

9 years ago
Permalink

Comment has been collapsed.

The only thing that would be fast enough to detect it would be Chrome's malware detector. Some of these sites are blocked by chrome whereas some aren't. Unfortunately Any other browser will instantly allow it or not be fast enough to close it/block it. Also some anti-virus programs may detect it but the free ones probably won't...

9 years ago
Permalink

Comment has been collapsed.

good to know all that, thanks.

not that i play csgo or any other game that would require TS anyway, and since i don't speak english i suppose i'm safe for this scam :3

9 years ago
Permalink

Comment has been collapsed.

It's really only to people with major amount of hours in CS:GO or TF2 so that the target can presume they're good to make the scam work. The thing is though. This scam has only become popular because of the younger audience playing CS:GO so they are more gullible. But now it's a major scam and everyone is being fooled by it. To be honest. Teamspeak shouldn't allow popups with links.

9 years ago
Permalink

Comment has been collapsed.

Same happened with me

9 years ago
Permalink

Comment has been collapsed.

well... you can certainly try doing a steam refund and trying your luck.

9 years ago
Permalink

Comment has been collapsed.

What you mean?

9 years ago
Permalink

Comment has been collapsed.

I fell for a teamspeak scam recently.
Lost my account with $469 in steam wallet and all my skins, including my knife, etc.
Valve gave me my account back within a week and my stuff back within 3 weeks.

http://www.steamgifts.com/discussion/Htz8U/steam-account-hacked-experiences

9 years ago
Permalink

Comment has been collapsed.

Oh, I'm happy it worked out for you.

9 years ago
Permalink

Comment has been collapsed.

that's pretty nice, congrats :3

9 years ago
Permalink

Comment has been collapsed.

Alright so we fell in the same trick XD

At least ur outcome is quite hopeful for me. My steam wallet amount wasnt that big but still, earnt it selling steam cards and csgo drops, its a bumer to lose it on a scammer.

9 years ago
Permalink

Comment has been collapsed.

Cheer up buddy, you are gonna get it back soon enough.
In my case, I started moving my funds to another account and spread things out a bit. Basically anything I buy comes from main account and anything I sell goes to second account. Might take a bit of time, but eventually, I will have them more or less evenly split amongst accounts.

9 years ago
Permalink

Comment has been collapsed.

Curious if any of the antivirus software out there detects this fake TS executable.

So for those who clicked it, did you have any AV installed then, or...?

9 years ago
Permalink

Comment has been collapsed.

Yeah, it did. I have AVG free version.

I simply did everything so quickly... I executed it few seconds before the message from AVG popped saying the file was removed.

9 years ago
Permalink

Comment has been collapsed.

Ah I see, that's unfortunate then. I use Avast and doubt if it would even allow the file to be executed before a scan, kinda disturbing that AVG behaves like this.

9 years ago
Permalink

Comment has been collapsed.

your comment made me think i didnt install any antivirus yet ( first thing i did after it happened was locking my steam account, second formatting my pc)

And ive been checking on google, people says avast is better than avg, so imma go for it :D

9 years ago
Permalink

Comment has been collapsed.

Use ESET instead. trust me.

Avast detected nothing after i scanned the fake executable, totally useless.

9 years ago
Permalink

Comment has been collapsed.

Fake TS executable ? Any details ? I use Ts sometimes...

9 years ago
Permalink

Comment has been collapsed.

Probably no,but you can try.. it was your own fault there so even if you won't get your money back don't get mad.

9 years ago
Permalink

Comment has been collapsed.

Been 11 years on Steam and I have had many, many scam attempts of all kinds and variations to date. And in the beginning of Steam the Steam security measures were not like these of nower days. But in the end I fell (together with other SG users) here on this site for the first time by the same serial betakey scammer during SG trading...

Scammers are hoping that someone isn't aware enough about the scam possibilities/doens't know all the facts and also that people are (to) busy/ (to) occupied/ (to) distracted/act to fast too notice the scam.

I wonder how many brands of a full version AV program would have caught and blocked the link outright and in time.

I hope it turns out good for you and Steam restores your account to what it was before the scam.

9 years ago*
Permalink

Comment has been collapsed.

So this is how it goes, huh? Got invited into a CS:GO group yesterday (from someone who's last login was 17 days ago, yeah right). There were TS adresses in the description, looks like I made the right thing ignoring it.

9 years ago
Permalink

Comment has been collapsed.

This is gonna be pretty long, sorry about that!


I've had my Steam Account taken twice.

First Time: The first time my account was taken was before Steam Guard was even a thing. I work in Server Maintenance, so I know how to keep things safe with my personal accounts and things like that. I had no software on my system that'd be able to get my password, and I certainly hadn't given it away to anyone. I also use randomly generated passwords so that they're as complex as possible to hack/phish into (this is a trusted site to do this), then I come up with a mnemonics to help remember it.

Well, somehow, someone got into my account anyway. At the time I had around 700 games, and I was losing my s**t trying to get it back. I contacted Steam Support, but I was worried that, as they've also been known for taking ages to respond, that more damage would be done during that period (and Steam didn't have all the refund and account safety stuff at the time making it worse). But hell, I got lucky. The person who got into my account (and changed the password as soon as they got in) didn't bother changing the recovery E-mail. So, I did a E-mail recovery, changed the password and was then worried for a couple of months about it happening again (but with someone smart enough to actually change the recovery E-mail), until Steam added the Steam Guard feature.

I lost around £130 in items and games they'd bought and sent right over to a middle account to transfer over to main accounts/sell off (Steam didn't have the hold on sending new inventory items at the time).


Second Time: This time was completely my fault. As I said, I work in the I.T field, so it really does happen to anyone when your attention just isn't fully there.

Someone added me on Steam and tried to scam with with a fake Steam Community link (which I literally get on a almost daily basis). I also add accept them so I can report them to Steam with screenshots and the rest. So, I click on the link they've sent me (using a sandbox software), so that I could also screenshot that. I reported the person, removed them from Steam and when on with the normal things for a couple hours.

Steams new Monday deals were out, and my Steam client was messing around with me, so I logged into Steam via the browser instead... or so I thought I had. Instead. without paying attention, I'd just typed 'Steam' into Chrome's URL bar, which suggests the closest match. I picked that match... and it was the damn scam site. I didn't notice, typed in my username and password and AS I hit enter I realized what I'd just done.

You know that falling/sinking feeling? I got that instantly and I felt sick. Tried to login via the actual Steam website and it wouldn't let me. They'd changed my password. They'd also changed my recovery E-mail... because it used a very simple variation of my Steam password. So they had access to my Steam. E-mail and more or less anything that was registered to my E-mail (thanks to E-mail recovery on most websites).

So I wrote a ticket to Steam Support almost instantly with what had happened and proof the account was mine (PayPal and Credit Card stuff, date it was created, couple keys recently used on the account). But I also needed to secure my E-mail. That was pretty simple because of the backup features most E-mail services use. As the people who'd taken over the account couldn't change the secondary E-mail without access to the secondary E-mail, I was able to get access to my E-mail again, and changed literally every single password to everything I could think of that was registered to that E-mail.

Once that was done, I had to just wait for Steam Support while feeling like a complete idiot for letting this happen to me. I've been using the internet since the early 90's. I use to use the internet on my damn MS-DOS computer. Yet I fell for this.

Around a week later (I was dying inside at this point) Steam got back to me and recovered my account. I had access again! But everything had been changed and stolen that could be stolen. Steam inventory was gone. Steam wallet was empty. I'd lost around £300 in Steam Wallet and... and honestly don't know how much in Steam inventory. They'd even cleared out my Steam Friends list.

Steam reimbursed the money lost from my Wallet (thanks to PayPal proof and just honest, stupid luck), but wasn't able to do the inventory games/items because I couldn't recall what was in there for sure, and because the items had all be transferred to many different accounts. I can live with that, I'm just happy I have my account back. The £300 was gone in my mind, so that was an amazing thing to get back too.


So, will you get your things back?

If it was a small amount, most likely yes (and with ease). You'd need to prove you had that amount in there, and prove that you yourself didn't spend it (that can be done with the games in your library alone if I remember rightly).

If it was a larger amount, they'll make you jump through some hoops (and have been using Steam's Security to the most), and even then, you won't be 100% guaranteed to get your money back. It all depends on how lucky you get with the support helper you get. If you weren't using Steam Guard to E-mail, I'd say there's slim chance you'll get the money back. If you were using it, it means they used your Steam session ID to get into your account, so Steam may be more inclined to help.

However, if you were using the 2-step Steam Guard for Mobile, I'd say you'd have a real good chance of getting the Steam wallet money back. Because that's supposed to stop anyone getting access to the account no matter what they do... unless they have your mobile phone too.

But like I said, it really isn't a dead certainty either way. You've just got to try, wait, and hope you're lucky.


And if none of that works, depending on what they did with your Steam Wallet money, I'd try doing a Steam Refund on the items. Because, majority of the time, these people are scamming people to make money from the account. Firstly, they'd clear the account out of everything other than the games in your library. Then they'll try selling the account. Then they'll try selling the games/items from their 'scam' middle-man account.

But, if they haven't yet sold the games/haven't activated the games they bought with the wallet money, you can simply ask for a refund on that money. Explaining the reasons why you're getting a refund wouldn't hurt your chances to say the least, either.


Sadly, it happens to the best of us. Feel bad about it long enough to not let it happen ever again and don't hang up yourself on it. At-least, right now, you have your account back. You might get the money back too!

Good luck!

9 years ago*
Permalink

Comment has been collapsed.

Even the best can fall for simple trick, eh? Haha. Nightmare must had it been.

9 years ago
Permalink

Comment has been collapsed.

Got refunded my steam wallet funds :)

9 years ago
Permalink

Comment has been collapsed.

Good to hear

9 years ago
Permalink

Comment has been collapsed.

Write what you did and what reply they gave, that'd help people in the same conditions like you were in.

9 years ago
Permalink

Comment has been collapsed.

Well i kinda explaint it editing the topic before this post. I just found it lame to point it out when it's already on top.

9 years ago
Permalink

Comment has been collapsed.

Sign in through Steam to add a comment.