You exposed your login credentials:
a) Either by logging into a site that faked a Steam login and made a bot log into your account using the save password as well as the trust device feature while injecting a Steam API access into it.
b) Or by installing malware that stole your session data or injected a keylogger.
c) Or by using outdated login information that got exposed in a leak.
d) Or by falling for a Steam Support impersonation scam on Discord or similar platforms.

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Ensure your email address and/or password aren't contained in any public breaches. There are various sites that allow you to do that.
-- If they are contained in any public breaches, change your email account's password from a secure computer before proceeding.
-- If that happens, you may want to secure other accounts than just Steam.
-- Consider using mobile two-factor authentication on your e-mail address if your e-mail provider supports it.
4. Deauthorize all devices INCLUDING the one you are using (You will have to relog after you click it): Steam -> Settings -> Security -> Deauthorize All Devices or https://steamhost.cn/twofactor/manage
5. Change passwords from a clean computer
6. Generate new backup codes for your Mobile App https://steamhost.cn/twofactor/manage
7. Revoke the API key https://steamhost.cn/steamcommunity_com/dev/apikey (there should be nothing in the APIKEY)
8. Change your trade link: Profile > your inventory > trade offer > Who can send me trade offer > scroll down and make a new trade link.
9. If points were stolen within 14 days, reset your Steam password (not change, RESET using Forgot Password) to cancel pending awards.
10. Once you have done all of the above steps, edit your profile to get rid of the fake message planted by the scammer (if it exists).

Steam Support will not restore stolen items nor stolen wallet funds.
In accordance with Section 1 C of the Steam Subscriber Agreement, you are fully responsible for all actions on your account, no matter who used the account. This includes actions that occurred as the consequence of fraudulent account access by phishing or malware, be it input relay, session token theft or any other method that granted a third party access to your account.

The ONLY way you can contact Steam support and through which you will receive official answers is through https://steamhost.cn/help_steampowered_com and no other way.

Anyone claiming to be from Valve contacting you through Discord or other means is a scammer.

This is a scam https://steamhost.cn/help_steampowered_com/en/faqs/view/3195-9FFB-BA06-F25B

There are no such things as pending bans and Steam do not operate on Discord.

In other words... YOU'RE BEING SCAMMED!!!

And phished...

At some point in the past you logged in to a phishing site using your Steam credentials...

This site PHISHED your account details and logged into your account...

And you have some curious profilr names...

And you're a CS2 player... how surprising...

Originally posted by Ettanin:

DO NOT TRADE AWAY YOUR STUFF. IT WILL BE LOST FOR GOOD.

This is not true for CS2 items within 7 days of a trade.

Amazing that people still use crap like Discord.

Almost as amazing that they actually believe what anyone says on crap like Discord.

The problem is people do not look up what the most common scams are until an attempt happens. Block and report the user on Discord or Steam, and never click on the links they post.