iheb ab 25. aug. kl. 22:08
Steam Guard failed me – account hijacked & banned
Hi everyone,

I’ve been on Steam for almost 10 years. My account is Level 70, worth over $1500, with more than 6,490 hours played across my library. In Rust alone I had 838 hours, all DLCs, and 50+ skins.

The issue is: my account was hijacked even though I had Steam Guard Mobile Authenticator enabled. While the hijacker had access, they removed my friends’ comments, uploaded offensive content, and cheated in Rust — which got my account permanently banned by EAC.

I’ve already secured everything (new passwords, 2FA on email, revoked API keys, malware scans, deauthorized devices). But the damage is permanent. Facepunch won’t lift the ban, and I’ve basically lost years of progress and money.

This makes me think Steam Guard isn’t as safe as we believe. If hijackers can still bypass it, then we aren’t really protected.

Has anyone else had their account compromised with Steam Guard enabled? And if so, how did it happen?

Thanks.
< >
Viser 1-2 af 2 kommentarer
ShelLuser 25. aug. kl. 22:22 
Well, the explanation is simple... not even the best lock in the world can keep your house safe if you give away the keys, which is exactly what happened here. Most likely you logged onto a 3rd party website using your Steam account while not realizing that the site you were using was actually a hoax: only meant to lure you into logging on and in doing so giving away all your account credentials.

Not even 2FA can help if you happily give away the security codes.
iheb ab 25. aug. kl. 22:30 
Oprindeligt skrevet af ShelLuser:
Well, the explanation is simple... not even the best lock in the world can keep your house safe if you give away the keys, which is exactly what happened here. Most likely you logged onto a 3rd party website using your Steam account while not realizing that the site you were using was actually a hoax: only meant to lure you into logging on and in doing so giving away all your account credentials.

Not even 2FA can help if you happily give away the security codes.

Yeah, that’s probably what happened — I did log into a third-party site (Rustly) a while back without realizing the risk. At the time it didn’t seem dangerous, but looking back I basically handed over my account info without knowing it.

You’re right, no amount of Steam Guard or 2FA can help if you give away the codes yourself. It’s a hard lesson learned, but now I know never to trust those sites again. Sadly the damage is already done — lost my Rust account, 838 hours, and 50+ skins because of one mistake.
< >
Viser 1-2 af 2 kommentarer
Per side: 1530 50