It really can happen to anyone, and blindside you
So i Fired up Dota2 for the first time this year, and wanted a group to play with. Got invited, and what i thought was cheerful teammates was social engineering scammers.
One in the party had LP so they wanted to play with FaceIT. I have played there before, so I didn't think much of it, but I shouldve just walked away. They want to invite me to a club, I say sure, but it requires some verification. I thought i had done that with faceIT earlier, but went with it nonetheless.
OH MY GOD it really looks official. And I scanned my Steam guard QR. And entered my password. I even streamed and showed me logging in, and a few emails (which I now realise are proably nothing, they already saw me enter my email). and then I had to start some kind of trade to get verified. That was step 4 or 5 beyond the first red flag.
I realise whats going on, and see an active session in Hungary, so I have now spent the last few hours trying to backtrack and scrub away everything i gave away. I have managed to reset password on Steam and email, I have logged out all devices, I have cancelled and reactivated Steamguard on my phone, ran malwarebytes, and went to check API - I even created one just to be able to delete it.
I did everything twice even, because i had the scam window open the first time. "Where are you from? Whats your name? You have family?" I am losing faith in humanity so hard, how could I be this stupid?
Go ahead laugh, I know I am close to (either that or crying), because I feel so stupid to fall for something so simple.
At least all I would lose is my steam inventory which is pretty much useless anyway.
It really is simpler than it seems.