Originally posted by MERRRY:

Hello Steam Support,

I am writing to report an unauthorized transaction that occurred on my account. My Steam account has Steam Guard enabled and has been secure for over 3 years.

Recently, someone gained access to my account and used it to purchase an item named "Uncommon Vulpes Carno" from the game "Primal Carnage: Extinction". This item has no real value, and I strongly believe this was a fraudulent transaction — the seller is likely the same person who hacked my account.

They listed a worthless item for an inflated price and purchased it using my wallet funds, essentially laundering money from my account. I did not authorize this transaction and was not aware of it until after the fact.

Please investigate this incident, ban the malicious user, and refund the full amount that was used to purchase this item.

Thank you for your support.

This would be a really good thing to send to actual, you know ... Support.

Us folks in the forums can't help you. But we all wish you luck!

Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or any off steam item sell sites, fake steam log-in websites, or by tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

--------------------------------------------------------------------------------------------------------------------
Your account was phished / hijacked. Follow steps 1- 8 to secure your account:

1. Scan for malware https://www.malwarebytes.com/

2. Check that the email and phone number on the Steam account are still yours.

3. Deauthorize all other devices https://steamhost.cn/twofactor/manage

4. Change passwords from a trusted/clean device.

5. Generate new backup codes for your Mobile App https://steamhost.cn/twofactor/manage

6. Revoke the API key https://steamhost.cn/steamcommunity_com/dev/apikey (there should be nothing in the APIKEY)

7. Make sure your steam recovery email account is secure and still accessible.

8. Do a PW reset to recover any steam points spent in last 14 days.

Steam will NOT return lost funds or Items.

------------------------------------------------------------------------------------------------------------------------
Because you were phished on your computer. They grabbed the session token from that 30 second 2fa code, along with your login info. that is the only way. with all 3 parts of the key, they could use that at any time to log in as you, since they had the 2fa session token code, steam thinks it is you.

The only way to get all 3 parts of the key is from your computer, you were phished.

https://steamhost.cn/help_steampowered_com/en/wizard/HelpWithAccount

To begin a account recovery (Lost / Stolen) Follow these steps:

https://steamhost.cn/steamcommunity_com/discussions/forum/7/601905007519865294/?tscn=1747857836

Originally posted by MERRRY:

Hello Steam Support,

I am writing to report an unauthorized transaction that occurred on my account. My Steam account has Steam Guard enabled and has been secure for over 3 years.

Recently, someone gained access to my account and used it to purchase an item named "Uncommon Vulpes Carno" from the game "Primal Carnage: Extinction". This item has no real value, and I strongly believe this was a fraudulent transaction — the seller is likely the same person who hacked my account.

They listed a worthless item for an inflated price and purchased it using my wallet funds, essentially laundering money from my account. I did not authorize this transaction and was not aware of it until after the fact.

Please investigate this incident, ban the malicious user, and refund the full amount that was used to purchase this item.

Thank you for your support.

You go to Steam Support for this. We're just regular people like you. The mods on here wont care and would probably say the same.

https://steamhost.cn/help_steampowered_com/en/

Originally posted by MERRRY:

Hello Steam Support,
...
Thank you for your support.

Keep in mind that postings like this make you an even more attractive target for scammers.

Don't forget that Steam support will NOT, EVER, talk to you through Steam Chat or Discord, they don't send you friend requests, they don't ask for files from your machine, they don't ask you to confirm a login, and they don't ask you to trade your stuff to some friend for safekeeping while they reset your account. All this, and more, is what scammers do.