https://preview.redd.it/d7kg2xyh7h2h1.png?width=2542&format=png&auto=webp&s=d418b794bf6dfb114212a03d996c5e78c3174136

https://preview.redd.it/8t6rxop8uc2h1.png?width=981&format=png&auto=webp&s=b77dee3820f90c4f2302049e4f93e9315e46ce73

A user added me saying my account was flagged as a scammer but i hadn't done anything the user filt out a ticket and told me to ad some administrator this "Troy Kingston" he told me to add money to my balance and he would run a check but it failed and he is asking for my login

https://preview.redd.it/xz2l8t5ruc2h1.png?width=1909&format=png&auto=webp&s=13c25389c77031945e2c57a17f34847ba12d24de

After thought, it was a scam after looking into their profile, the "administrator" badge was from a game called "Transistor" the account that initially contacted me was presumable their alt i have to say the videos were convincing but clearly edited.

Just had this guy randomly pop up in my discord dms with the following (also I made my pfp myself, so I doubt someone has the same pfp as me)

https://preview.redd.it/xxg9scdtp92h1.png?width=606&format=png&auto=webp&s=2778ca3d034bf9a05a677dc0a4bf4bec5dc79a52

It also says my iPhone is in Ventura. Could I just be not remembering? I don’t live close to California but I am in the US.

Hello, yesterday someone logged onto my steam account, added 2 seperate accounts as friends, bought Forza Horizon 6 with a DLC ( 70€ ) and Escape from Tarkov ( 50€ ) and gifted it to those 2 befriended accounts. I filed for refund within 5 minutes of the purchase. Steam denied the refund because it was purchased as a gift.

I live in Germany and the last login was from a city in the US. I screenshotted everything and also sent a support request for unauthorized access to my steam account.

I did virus scans on all pcs in my network and checked everything else. I never fell for any bait or gave my login code to anyone. I have 2fa and Steam Guard enabled for a long time.

After the attack I disconnected my PayPal from steam. (PayPal denied a refund request)

Changed email, password and logged off every device (Only my phone, my pc and the login from USA were logged in).

Is there anything else I might be able to do?

Any help is appreciated.

EDIT: SOLVED, Steam refunded all the money back to my PayPal.

Hello everyone,

I hope yall are doing good. I made a post because i need help. So the whole thing happened 2 days ago on saturday at around 01:30am. I was playing games with my ftienda at that moment and i have received a notification that the payment was succssesfull. I went into a panic mode, changed all my passwords and have requested a refund from steam. 2 days aftet that i have received an email from steam that they cant refund the game because the other acvount has accepted the gift.

Does anyone have any advice on how to proceed with this and is there any way to get my money back.

Any help is appreciated!

Long story short my steam account got hacked and they took my card information, first and last name, ip address, home address, phone number and email to make a purchase of 1000$. The money is already gone.
Now that I know about this how can I use steam and other things on my po without risk of losing anything.

Should I buy a vpn?

Make new accounts for everything?

For some background, I'll tell you how it got stolen.
I'd like to point out that my phone in in "Do not disturb" mode every time I play video games. This will be important later.

So I was playing Competitive on Inferno when I suddenly got disconnected, and the cause of disconnection appeared to be "Not logged into Steam". I was confused, because I've logged in just before I started that Competitive match. I closed CS and opened Steam, where I was greeted with a "Log in" window. I inserted my information, but it said that the password was incorrect. I thought that I must have made a mistake in my password and tried again. Same result. I was annoyed with this and decided to log in with a QR code, but when I opened Steam on my phone, I was greeted with the same "Log in" screen. "What the f?", I thought. I turned off "Do not disturb" mode and saw that I've missed three or four notifications from my email. I would ignore them if they weren't labeled "Steam support"(Tgey were). I quickly checked the email address to be sure it is not fishing, then I began reading. First one said that my Steam Guard authenticatir was successfully deleted, second one said that my Steam password was successfully changed and the third one said that the email address, connected to my Steam account was successfully changed. At this point it wasn't hard to realise that my account has been stolen, so I took immediate actions. I quickly froze my account

For those who don't know, freezing a Steam account disables performing certain actions, such as buying and selling stuff on Steam Market, trading, adding money to the Steam account and palying on servers where the VAC anti-cheat is active (in every game from Valve). The account can be unfrozen only by entering a code that was sent to your first email (ever attached to Steam).
Now let's get back to the story.

After I recieved a message that the account was successfully frozen, I reported my account as stolen and provided all the information that might be useful for this case. All I had to do after the report was sent is to wait.

Fast forward to the next evening.

I opened Epic Games to play some Fortnite and saw that they are giving away the game I've been wanting for a long time. I grabbed it abd opened my email to see tha receipt for it, and then I saw it: new message from Steam support (strangely, I haven't received any notifications for it). It said that my Steam account password was successfully changed and the login and the new password were further in the message. I cooied this password and tried it. It worked. They even attached my email back to my account. All I had to do after this is to set tge Steam Guard authenticator and change the password. But there is one strange circumstance: my accoun wasn't frozen for some odd reason.

My friends advised me to reset my API key, but I don't understand what it is, nor do I know how to reset it. Also, are there any more ways I can protect my Steam account, except the Steam Guard authenticator?

Processing img xk17w2a1px1h1...

steamdb: https://steamdb.info/app/3393800/

They re-named it Beyond The Dark.

Just posting here so people are aware.

Hey everyone,

I just wanted to share a very sophisticated and highly psychological social engineering scam that happened to me today. I consider myself an experienced player (former Global Elite) and usually never fall for phishing, but these guys ran a literal multi-day script with multiple people to catch me off guard. Please read this so you don't fall for it.

1. The Long Con (Building Trust)

I met a guy last week during a casual CS2 retake match. He was super chill, spoke good English, and added me on Steam. He didn't pitch anything right away. We didn't talk for a week, which made it feel like a completely organic friend request. Yesterday and today, he messaged me asking if I wanted to play competitive because they were a stack of 4 and desperately needed a 5th.

2. The Setup & Pressure

I joined their Discord server. We were chatting, laughing, and everything felt completely normal. Suddenly, one of their guys said he couldn't play competitive matchmaking because he had a 2-hour cooldown for team-killing. Someone else suggested playing Faceit instead. Since I play a lot of Faceit anyway, I agreed.

Instead of just adding me, he told me to join the "BIG club" on Faceit. Unbelievably, I was already in that club from months ago, so my brain instantly flagged it as 100% safe.

3. The Live Stream Trap

He claimed he couldn't find my profile and asked me to quickly stream my Faceit tab on Discord. This is crucial: They wanted to see my screen so they could time their fake bot perfectly.

As soon as I linked my Faceit to Discord on stream, an allegedly "official" Faceit Verification Bot messaged me on Discord. The bot asked me to verify my account. I clicked through the "Is this your account?" prompts, which opened a tab in my browser.

4. The "ClickFix" Payload

The browser tab showed a fake Cloudflare Error page (claiming a connection error). The page "instructed" me to fix it by opening Windows PowerShell as an Administrator and pressing Ctrl + V (which automatically executes a hidden, pre-copied command in your clipboard).

Unbelievably, in the rush of not wanting to keep 4 guys waiting, I did it. The moment I hit enter, my gut instantly knew something was wrong.

TL;DR:

If anyone adds you, acts nice for a week, invites you to a Discord stack, and you end up facing a "Cloudflare Error" that asks you to paste anything into PowerShell – IT IS A TRAP. They are using the "ClickFix" campaign to steal your browser cookies, Discord tokens, and session data to rob your Steam inventory.

Stay safe out there.