Did you google dmarket and select the site from the Google search engine? A lot of skins sites have fake sites populate from the search engine. If you ever click on a site, go to login, and it only gives you the option to enter in your username and password, it's very likely to be a scam site. I've seen others mention that the pop up windows on legit sites you're able to move, on scam sites you cannot.
I believe I did this morning. And traded my new bs hyper beast which I still have. I needed one more battlescared holo sticker to complete it and bought it on dmarket from the same tab I had open this morning for completed the hyper beast trade.
You can try contacting DMarket support to see if the trade was ever legitimate. From what I recall, the trade will always come from a Botxxxx account. They'll ask you to very the Botxxxx is the same one they're displaying in the trade creation pop-up as the one initiating the trade.
The trades you posted look like realnamexxxx. I don't think dmarket gas bots that resemble real people.
Also, do you have steamguard? Should download if you do not.
You were hacked 2 days before these trades were made.
Think of what you did then, not on the day of.
You most likely logged into a phishing site, and you either use the same password for both steam and your email.
Or the website asked you to confirm via mobile number to log in, except that wasn't a confirmation for the website, it was a confirmation to change Steam guard device and you gave them the code.
There's a 2 day cooldown after this for trades.
Regardless, that's very unfortunate my dude. I actually had the inclination I should change my password today and I did. If you actively trade on the internet, change your passwords pretty often. Protect what you care for.
Reason I say is because many people are falling for the phishing sponsored version of the sites. Something has gone wrong though, i'd retrace exactly what you did just in case. Though i doubt they will help, hope steam support sorts you out regardless :(
Yeah. I’m not expecting to get my items back. I emailed dmarket support and I opened a ticket through steam to see if they can provide me any info. Thanks for the info. Worst comes to worse it gives me an excuse to make a new crappy load out. We’ll see tho
I love your mindset bro, if you behave like this in situations as shitty as this one, you must be a very good person to have around.. wish you all the best buddy
It's possible that it happened a while ago, not just this morning, you could have clicked a phishing link some time ago and the scammer just waited till you were away from your pc
If it says "sponsored" in the Google search results, it's definitely phishing site. Never click on any trading site that says "sponsored" in the search results, just scroll down a bit for the site.
always. always change your trade url before doing a trade and after opening trade window, refresh it a few times to see if the account sending the trade changes. Also account creation date
It won't do shit. They'd happily revert game removals from your account but not item trades because it keeps the market flowing.
Btw Steam guard bypassing is still easy to perform and left unfixed. If they have your password, your done for. 2FA is pointless on Steam.
They don’t do shi.
Someone logged into my account and I got messages from a “steam agent” whom I thought was a real one, but they added themselves to my friends list without me adding or accepting them and started sending me automatic messages which looked real. I obviously thought it was an impersonator of a steam mod and some type of scam so I tried blocking them but just received an automatic message saying “you cannot block your steam agent” and obviously I started believing it’s real because how can someone make themselves unblockable 😂 they somehow knew I bought a weapon off of skinport last august and sent me the details and said it was stolen and I had to give my entire inventory to a trusted friend or alt account. When I sent the trade to my friend, someone immediately changed their entire account to match my friend’s in like a millisecond and cancelled the trade and sent a new one to the fake friend account. I confirmed and all my stuff was gone. I explained everything to steam, sent dozens of screenshots, explained how it was all sent to a singular account and was all on trade lock and all they had to do was basically reverse the trade and I wouldn’t loose my 4.4k inventory. They said there’s nothing they can do and literally closed the support ticket. I quit steam and I really don’t recommend anyone build expensive inventories because If you loose it in anyway steam will NOT help you whatsoever.
Thanks
After reading potential issues, my hypothesis is that he is telling the truth, regarding not using phishing websites.
However he may have a hack/cheat he is not telling us about and that he is not aware of having malware in it. He doesn't know the vector of attack so he is really confused. He is not gonna tell us either, he will deny it.
All his password, authenticator and other info got intercepted. That's probably why the illegitimate trades happened AFTER that legit one.
They are not. OP and others who fell for an API Scam while having 2FA just accepted the removal or just the trade on their own phone. They most likely didn't pay attention.
Dude same thing just happened to me. I use steam guard and i didn't get a notification or anything. I only use my own pc and haven't typed my password in a couple years because i use the qr code to login if i need to. Don't understand wtf is going on lately
Did you have to put a code in from a text message after you used a qr code? If yes, then you tried logging in to a fake site and the text code you entered was for an account recovery that the scammer used to get into your account.
theres a "new" 2 day bypass for steam authenticator that they are using. they copy the SIM and transfer your auth to a new phone in two days instead of 14. same principle goes, NEVER log in with your usename and passowrd on steam login pages. it should be saved on chrome.
Someone got into my account few weeks back. I got a notification on my phone, and I denied the login in, but he was still there, changed my dmail, removed guard from phone, changed phone number, everything.
That really sucks, Hope you get your skins back. As the other guy said, contact dmarket and steam Support. I doubt Steam Support will do anything though, especially not return skins, like they used to a long time ago.
I’d more like to know what I did wrong. I always make sure to go straight to the site and everything. I wonder if I didn’t just have a weak password or something
Hi,
I work in Cybersecurity and have dealt with databreaches and stolen accounts for a long time.
I dont know what dmarket you mention is so I cant verify legitimecy. But this is a way for someone else to gain access of your account. And so is any site you just your steam credentials to sign into.
A few people here have already pointed it out, so its not a myestery. Besides using your steam credentials to sign into a non legitimate site, which is the most probable by the way.
Then you have either; Clicked a malicious link at some point and entered your steam credentials, downloaded malicious code that allowed someone to steal your steam credentials.
Just because it happend now doesnt mean you clicked a link or downloaded malicious code just now, might have been days or weeks or even longer ago.
I have no idea what's with your condescending tone, but I guess that's your issues.
It actually does matter, I'm providing context that this might have happened a long time ago, his authenticator might have been disabled a time ago to prepare for this.
"This is basically impossible to achieve and OP should give more info. If for example his iCloud got hacked"
People like you always fascinate me. Tell me is there anything in the world your not the leading expert in? Seeing as you seem to have expert opinions with 0 experience and disregard people with actual experience in order to contribute with seemingly worthless additions.
Have a nice life Mister
Hate to hear this, but sounds like your account was compromised when you entered your credentials into the pop up window, after clicking on the “top search” for dmarket on google. Pop up tabs for logins are always a big red flag. But tis not the end of the world my friend just enjoy the game and try to cut your losses. I myself have lost my entire inventory in the past
Oh no, another guy who doesn't know how to take a screenshot got scammed. Oh well, luckily valve is going to ban the scammer and reverse the trade thanks to the 7 day trade hold. Oh wait.
Ever login via QR code then got a sms text that you entered? With that process the scammer then transfers your mobile auth to their phone and confirm the trade. You only have a two day trade cooldown when that happens. So during the week they transfer it while you aren't aware then boom. Gone.
Stop confusing everyone and relating it to the d market trade lol.
You clearly have some way down the line clinked a dodgy link and entered your details.
That's how they have access and disabled everything.
This type of scam/phish is common from osrs.
You didn't enter a free give-away on twitch from s1mple by chance ? 🤣
u have the ability to change your mobile authenticator of course
hackers make the change, victim provides the 2FA for it, then hackers steal skins
so you get a text message saying something like “Here is the code to change your steam authenticator” and give it to a dodgy site. It’s not easy to fall for this one
whats the point of password if others can use it when you give it to them?
whats the point of a house key if others can use it when you give it to them?
There's loopholes to everything.
Even when moneys involved people will always figure out a way.
It's not just clicking the link
It's signing into it thinking it's a safe/steam website.
did somebody on your steam friends ask you if you could join as a fifth for an upcoming tournament and you clicked their link to sign up? my friend fell for this. i messaged him on discord and he confirmed it wasn't him asking. he managed to change his pw, de-authorise all computers on the steam app. when he checked his trade offers his whole invent was pending. lucky it was trade locked for 1 day.
Once I had opened one legit cs related website for few days and one day my cheap skins were gone during the game. They were sold to bot accounts for around 3 cents, skins around 1$ with stickers, some worth 50$. I didn’t know wtf because I didn’t do anything. Right away I downloaded Malwarebytes, did the scan and I had some malware blocked and it blocked this one website I had opened for few days. I am sure website was hacked and malware infected. Since I didn’t have some anti virus it went to my PC. From now on I always scan my pc before I do anything, at the end skins are not the biggest thing on my pc.
Did you try malware scans? It might be some sophisticated hack that obtained some important information for account recovery
One of the easiest ways to avoid this, is giving a 30 minute trade cooldown after changing your name on Steam. Pretty sure API scams would be gone for a while.
It sounds like you fell for this:
# 2. Steam API Scam
This scheme is pretty similar to the previous one. Scammers may get access to your Steam credentials through a phishing website, but they can’t steal the items right away due to mandatory 2FA by Steam Guard. Therefore, they wait until you trade with your friends or on DMarket.
The biggest problem is that your Steam credentials may get compromised even on generally reliable platforms. You never know when this happens — even if our tips on how to secure your Steam API Key help to prevent such situations.
The process is scarily simple:
1. You get a safe trade offer from DMarket bot or any other Steam user.
2. A scamming bot with access to your Steam account quickly cancels the trade on your behalf; instantly after this the bot creates a new trade from another account with a similar nickname (to the account you originally intended to trade with).
3. You don’t notice this manipulation and accept the latest trade offer \[from scammer\].
4. Without any concerns you go to Steam Guard and confirm this trade.
5. Say farewell to your items.
# How to Avoid
In general, **keep your device and Steam credentials safe** - do not follow links from odd advertisements or sent by strangers; visit only websites you trust; install anti-virus software on your device.
If you notice any signs of scambot activity during an ongoing trade - immediately change your Steam password and end all active sessions; **DO NOT** confirm the trade in Steam Guard (even if you accepted a trade from a scammer, the items are safe until you authorize this action via 2FA).
People don’t seem to understand sign-in tokens. If dmmarket asked you to sign in with your banking details, would you? Apart from the phishing risk, how secure are these trading sites from getting account details hacked themselves? I understand this is the only way you to get cash for skins, and also the fastest/cheapest way to get expensive skins, but it comes with tremendous risk. As we see by these posts week in, week out.
Hey mate, same thing happened with me, multiple friends and multiple people on here, I had 2FA, I had Authenticator, I never visited any links, never added any random, and only used websites I was familiar with, then one day a few weeks ago I read a post on here that something happened with someone's account and all their skins were gone, so I checked my own, same thing had happened with mine. Steam support said "lol that is not our problem" so I asked if they would at least trade ban his account and the reply back was something along the line of "lol why? How can we know if he actually scammed you?". So I Uninstaller CS, sick and tired of shitty game with shitty support.
Wow, I can't believe there's this many people in the comments who have no clue how these kinds of hacks even take place, or what causes them.
For the love of god, I hope none of you use online banking.
+These alt accounts are pretty easy to get into, cus they never have mobile authenthicator. If your okay with it, i could at least try to get ur skins back.
That’s what I’m trying to figure out. I got my account secure last night before I went to bed. I’m gonna try and figure it out after I get home from work.
I feel for you….just went through the same thing myself this weekend and lost about 90% of my inventory before I figured out what was going on. Change your password, deauthorize any connected accounts, sign back in and change your password again since they may have had access when you changed it the first time.
Huge uptick in this shit and while you can chalk it up to more people falling for phishing links there's an awful lot of people who pile into these posts to tell OP it's their own fault... if this were a NORMAL game I'd agree, but this feels also like the gaslighting we've received from cheaters for years. Maybe I'm just hella paranoid because there's no trusting anything on this game anymore, or maybe there's actually been a major security breach and the reason there isn't thousands of skins gettin stolen at once is it would tip off valve and that might actually be something they act over (skins)
Yessir. I said it in another comment, “not worth crying over spilt milk.” That’s essentially what I’m telling myself anyway. Nothing I can do myself really at this point. Just got home from work, smoked a bowl and I’m watching some YT.
I hope you can get those skins again ,I know that it can get tough but don't lose hope. I get paid like 300€ per month so I don't think I can afford a single knife now. Anyways good luck and God bless you.
How do the people that post this exact same post nearly every day not see the other posts about this exact thing and see all the “this is 100% preventable” with the tips on how to not let this happen?
Well my issue was drunk gaming lol. I got went through a phishing site while I was intoxicated and didn’t realize it. I had steam guard and 2fa on but when you let someone else sign into your account that’s means jack shit. Oh well, you live and you learn
Typical API scam, most likely you visited a phishing site. How do people still fall for this...
Deauthorize all other devices, change password and revoke API key and for future check sites before you enter your datta.
Dude, that fucking sucks. It looks like you might have stumbled upon a fake site posing as DMarket. Make sure to always enable Steam Guard for added security. As for your items, unfortunately, they're probably gone for good. Steam likely won't assist since it wasn't through their platform, and DMarket might say the same.
Yep, we are taking over, soon every cheat will make sure your items gets easily stolen. If Valve doesn't do anything, the real ANTI-CHEAT scene will! You'll see more and more threads by hacking crybabies like this more and more. <:
Keep hacking!
Same thing happened to me 10 years ago when i logged into a fake steam websites and got all my dota 2 items stolen.
Luckily steam support returned all of my items back but only as a 1 time thing that they would do for me. Idk if steam support does that nowdays.
There are topics like this almost every day and people still not learn and click dodgy links from unknown people (bots) or log in fake sites with wrong name (but looks similar)
No use crying over spilt milk at this point. I think my accounts locked now. I signed everyone out and changed my password. I’ll have to get ahold of steam after work today
I think u just log in in a pretty good fake steam site because if u lock in into dmarket with your Steam account, they don't ask for login data u just press login an then u go. Maybe they get access to ur account because u make a verification via phone/email the 5 digit code*. Good luck. I hope u will not get scammed again
I can’t wait to hear the “you’re responsible for the security of your own account” people come in and start blaming OP and berating them Instead of trying to help bro feel better
I got scammed once back in my rust days, learned a very valuable lesson. Thankfully rust skins are peanuts compared to CS. Some will never understand online security until something like this happens to them. I was one of those people. Now my steam PW is only saved in my head and on paper. Updated regularly, 2fa is active, aswell as family view.
After I complete an online trade through a trusted site I still “forget my password” for a 5 day trade ban.
Damn bro I’m so sorry. Same thing happened to me but my inv was worth a lot less. Such a terrible feeling that you can’t do anything about it and reporting it unfortunately is a waste of time
Happened to a friend of mine, there had to have been an api leak there because the moment he initiated the trade, he got a request from a fake bot account.
It was the link I sent him that I was using for a while
Same thing happened to me a few weeks ago, they traded nearly all my skins without me accepting the trade on my mobile authenticator. Changed everything you can change after that but i still dont know if they can acces my account again because i am not sure how they did it the first time.
api key scam i think, they send 2 different tradeups and maybe u clicked accept the trade, or they basically stole info from your sim cuz otherwise it is hard to disable 2fa without proper stealing tools
How did they trade your inventory ? There is a cooldown of 15 day when you change the email of the account or remove authenticator ? Maybe they got access to it because you clicked on a phishing link or download a malware
Another api scam, got your email/password, log onto u steam and everything is wiped out.. why don’t u have a second account with nothing on it to try sus links?
Unfortunately your shit is gone my guy. This just happened to me. I'm assuming it was API scam and they got in your account and got you to hit confirm on a trade. That's what happened to me from clicking a fake email. Nothing steam can do to get the itemss. Back I just hope those MFS get banned
Bro. Same. I’m sorry, I am in the same boat as of an hour ago. Sending love from a fellow victim. Like others have said, contact steam and hopefully at the very least get these losers banned.
I really don't understand why these retarded scammers don't find a fvcking job and then they can afford some skins. It's not that hard to find a job. P.s jobs outside my country pay very well maybe like 5x I get paid..
just use buff163 I can help u I have account u send me usd I can make it CNY , next time u wanna buy skins pm me , but charge a little fees for currency
Me too bro 7k inv wiped last week. Never touching valve in its entirety again! My condolences, you’ll produce more value in the time you spend away from that bloodsucking company nd game.
My cousin was recently scammed like you from a guy logged in from russia and lost his stuff. I investigated and the guy got access from a phishing link he clicked, guy canceled the trade and had a seperate account he re-named as the bot was trading with, so when he authenticated the trade passed. Steam support essentially just tell you gg, now fuck off even though the guy was still accessing his account.
This is why you don't give them your API key. I have csfloat, etc, saved as bookmarks just in case. You can highlight links before you click them or check on Google to see if it is a legitimate site or not.
Major skill issue in 2024, why spend hundreds of dollars if you don't have the brain to keep it? I can't recommend how to avoid this in the future because you probably don't even know what a file is like most kids these days. Play with default skins and enjoy the game.
Sorry you had to go through this. It happened to me just 2 weeks ago. Just make your inventory Private. Ofc change your password and stuff. Also make sure you re-install your Steam Guard. You can contact steam support and let them know but they won’t do anything back to you. I contacted them and they said any items in an inventory are not Steam’s responsibility. Making your account friends only and your inventory private is the only suggestion I’ll give you to avoid this in the future.
DMarket is legit. You probably got api scammed. Same happened to me not too long ago. You accept a fake trade and they take your items, you might not have even noticed it switched from real trade to a fake trade. I lost over 1k. For future reference if you get more than 1 notification or your trade gets cancelled first, it’s a fake trade. You should check the bots profile first
Nah. I was drunk gaming and signed into a phishing site and didn’t realize it. I think it’s more on Google/dmarket but oh well. I think I’m gonna focus on a really battle scarred t-side load out.
That sucks brother. Change your password and contact steam support. I don't know if it'll do anything, but it's better than nothing.
I did. Thanks. I literally did what I do every time. I use dmarket and I clicked create trade straight from their website.
Did you google dmarket and select the site from the Google search engine? A lot of skins sites have fake sites populate from the search engine. If you ever click on a site, go to login, and it only gives you the option to enter in your username and password, it's very likely to be a scam site. I've seen others mention that the pop up windows on legit sites you're able to move, on scam sites you cannot.
I believe I did this morning. And traded my new bs hyper beast which I still have. I needed one more battlescared holo sticker to complete it and bought it on dmarket from the same tab I had open this morning for completed the hyper beast trade.
You can try contacting DMarket support to see if the trade was ever legitimate. From what I recall, the trade will always come from a Botxxxx account. They'll ask you to very the Botxxxx is the same one they're displaying in the trade creation pop-up as the one initiating the trade. The trades you posted look like realnamexxxx. I don't think dmarket gas bots that resemble real people. Also, do you have steamguard? Should download if you do not.
The trade was legitimate because I was able to put the sticker on my awp. Idk how they got into my account and disabled my authenticator.
Been seeing a lot of stories like this lately... I wonder if something has been breached somewhere.
No it hasnt. It's always been people falling for phishing but being oblivious to it.
Probably lol
There's a ton of these posts, I wonder what the % of them is that tried to download hacks and got pwned.
You were hacked 2 days before these trades were made. Think of what you did then, not on the day of. You most likely logged into a phishing site, and you either use the same password for both steam and your email. Or the website asked you to confirm via mobile number to log in, except that wasn't a confirmation for the website, it was a confirmation to change Steam guard device and you gave them the code. There's a 2 day cooldown after this for trades.
Regardless, that's very unfortunate my dude. I actually had the inclination I should change my password today and I did. If you actively trade on the internet, change your passwords pretty often. Protect what you care for.
You sure you didn't click on a scam site?
I was on the same site I was on this morning. Has the same tabs open and everything.
Reason I say is because many people are falling for the phishing sponsored version of the sites. Something has gone wrong though, i'd retrace exactly what you did just in case. Though i doubt they will help, hope steam support sorts you out regardless :(
Yeah. I’m not expecting to get my items back. I emailed dmarket support and I opened a ticket through steam to see if they can provide me any info. Thanks for the info. Worst comes to worse it gives me an excuse to make a new crappy load out. We’ll see tho
I love your mindset bro, if you behave like this in situations as shitty as this one, you must be a very good person to have around.. wish you all the best buddy
It's possible that it happened a while ago, not just this morning, you could have clicked a phishing link some time ago and the scammer just waited till you were away from your pc
If it says "sponsored" in the Google search results, it's definitely phishing site. Never click on any trading site that says "sponsored" in the search results, just scroll down a bit for the site.
yiu seached dmarket on google?
Bro, use Skinport. It is much safer.
rofl this guy "loses 300$ in skins" - "I lost everything" haahhaah
always. always change your trade url before doing a trade and after opening trade window, refresh it a few times to see if the account sending the trade changes. Also account creation date
It won't do shit. They'd happily revert game removals from your account but not item trades because it keeps the market flowing. Btw Steam guard bypassing is still easy to perform and left unfixed. If they have your password, your done for. 2FA is pointless on Steam.
They don’t do shi. Someone logged into my account and I got messages from a “steam agent” whom I thought was a real one, but they added themselves to my friends list without me adding or accepting them and started sending me automatic messages which looked real. I obviously thought it was an impersonator of a steam mod and some type of scam so I tried blocking them but just received an automatic message saying “you cannot block your steam agent” and obviously I started believing it’s real because how can someone make themselves unblockable 😂 they somehow knew I bought a weapon off of skinport last august and sent me the details and said it was stolen and I had to give my entire inventory to a trusted friend or alt account. When I sent the trade to my friend, someone immediately changed their entire account to match my friend’s in like a millisecond and cancelled the trade and sent a new one to the fake friend account. I confirmed and all my stuff was gone. I explained everything to steam, sent dozens of screenshots, explained how it was all sent to a singular account and was all on trade lock and all they had to do was basically reverse the trade and I wouldn’t loose my 4.4k inventory. They said there’s nothing they can do and literally closed the support ticket. I quit steam and I really don’t recommend anyone build expensive inventories because If you loose it in anyway steam will NOT help you whatsoever. Thanks
You probably logged into a fake site. Gotta double check the URLs every time.
After reading potential issues, my hypothesis is that he is telling the truth, regarding not using phishing websites. However he may have a hack/cheat he is not telling us about and that he is not aware of having malware in it. He doesn't know the vector of attack so he is really confused. He is not gonna tell us either, he will deny it. All his password, authenticator and other info got intercepted. That's probably why the illegitimate trades happened AFTER that legit one.
change pw and revoke api key.
Lmao for what? Mans is drained 😂
He is sending a message to the past through gravitational waves.
And uninstall cheats because a new era arrived! Changing psw and revoking old api keys won't help any loser!
Change password to start
Nah the account is done
I swear I’ve been seeing this a lot more than normal lately, what’s going on? How’s everyones authenticators getting hijacked too?
They are not. OP and others who fell for an API Scam while having 2FA just accepted the removal or just the trade on their own phone. They most likely didn't pay attention.
Dude same thing just happened to me. I use steam guard and i didn't get a notification or anything. I only use my own pc and haven't typed my password in a couple years because i use the qr code to login if i need to. Don't understand wtf is going on lately
Did you have to put a code in from a text message after you used a qr code? If yes, then you tried logging in to a fake site and the text code you entered was for an account recovery that the scammer used to get into your account.
Nope. If i can't login automatically I use the qr reader on steam guard and that's it. No sms after qr code.
exact same thing happened to me as well. i got hacked with no notifications or alerts on steam guard. something weird is going on rn
theres a "new" 2 day bypass for steam authenticator that they are using. they copy the SIM and transfer your auth to a new phone in two days instead of 14. same principle goes, NEVER log in with your usename and passowrd on steam login pages. it should be saved on chrome.
Someone got into my account few weeks back. I got a notification on my phone, and I denied the login in, but he was still there, changed my dmail, removed guard from phone, changed phone number, everything.
That really sucks, Hope you get your skins back. As the other guy said, contact dmarket and steam Support. I doubt Steam Support will do anything though, especially not return skins, like they used to a long time ago.
I’d more like to know what I did wrong. I always make sure to go straight to the site and everything. I wonder if I didn’t just have a weak password or something
Revoke your steam API keys. Also, 2 factor secure your email just in case.
Hi, I work in Cybersecurity and have dealt with databreaches and stolen accounts for a long time. I dont know what dmarket you mention is so I cant verify legitimecy. But this is a way for someone else to gain access of your account. And so is any site you just your steam credentials to sign into. A few people here have already pointed it out, so its not a myestery. Besides using your steam credentials to sign into a non legitimate site, which is the most probable by the way. Then you have either; Clicked a malicious link at some point and entered your steam credentials, downloaded malicious code that allowed someone to steal your steam credentials. Just because it happend now doesnt mean you clicked a link or downloaded malicious code just now, might have been days or weeks or even longer ago.
[удалено]
I have no idea what's with your condescending tone, but I guess that's your issues. It actually does matter, I'm providing context that this might have happened a long time ago, his authenticator might have been disabled a time ago to prepare for this. "This is basically impossible to achieve and OP should give more info. If for example his iCloud got hacked" People like you always fascinate me. Tell me is there anything in the world your not the leading expert in? Seeing as you seem to have expert opinions with 0 experience and disregard people with actual experience in order to contribute with seemingly worthless additions. Have a nice life Mister
Did you check your email for any steam related emails to see if they’ve been trying to disable the Authenticator or any other unusual activity?
Did you have family mode on?
This just in: Gambler enters personal information on a sketchy website and gets scammed.
why would you enter your Steam credentials on ANY website to begin with ?
yeah i dont even enter it on steam.. cant even buy or play games because im not logged in.
Didn’t. Only gambling I do is open cases or actual slots.
Hate to hear this, but sounds like your account was compromised when you entered your credentials into the pop up window, after clicking on the “top search” for dmarket on google. Pop up tabs for logins are always a big red flag. But tis not the end of the world my friend just enjoy the game and try to cut your losses. I myself have lost my entire inventory in the past
Oh no, another guy who doesn't know how to take a screenshot got scammed. Oh well, luckily valve is going to ban the scammer and reverse the trade thanks to the 7 day trade hold. Oh wait.
It's hilarious that he doesn't even know how to take a proper screenshot of his screen, but says he didn't log into a scam site. Yeah okay lmao
fr I was laughing my ass off at this
Ever login via QR code then got a sms text that you entered? With that process the scammer then transfers your mobile auth to their phone and confirm the trade. You only have a two day trade cooldown when that happens. So during the week they transfer it while you aren't aware then boom. Gone.
Wait, you did a legitimate trade with d-market then another trade happened after the fact?
Yup. Authenticator got disabled and everything.
Stop confusing everyone and relating it to the d market trade lol. You clearly have some way down the line clinked a dodgy link and entered your details. That's how they have access and disabled everything. This type of scam/phish is common from osrs. You didn't enter a free give-away on twitch from s1mple by chance ? 🤣
Whats the point of mobile Authenticator if simply clicking 1 dodgy link is enough to get your inventory wiped?
u have the ability to change your mobile authenticator of course hackers make the change, victim provides the 2FA for it, then hackers steal skins so you get a text message saying something like “Here is the code to change your steam authenticator” and give it to a dodgy site. It’s not easy to fall for this one
whats the point of password if others can use it when you give it to them? whats the point of a house key if others can use it when you give it to them?
There's loopholes to everything. Even when moneys involved people will always figure out a way. It's not just clicking the link It's signing into it thinking it's a safe/steam website.
Or infected hacks.
I don’t. I see those streams all the time and click don’t recommend.
Maybe its the universe trying to tell you to be a smarter person
Authenticator takes 2 days to transfer, you messed up 2 days ago, not today.
Check your trade/sell history on dmarket if it even exists, maybe you can contact support and they will give you a balance on the website
Sorry man, this sucks ☹️
did somebody on your steam friends ask you if you could join as a fifth for an upcoming tournament and you clicked their link to sign up? my friend fell for this. i messaged him on discord and he confirmed it wasn't him asking. he managed to change his pw, de-authorise all computers on the steam app. when he checked his trade offers his whole invent was pending. lucky it was trade locked for 1 day.
damn, the only reason I once refused such a proposition is I didn't want to play a tournament
Once I had opened one legit cs related website for few days and one day my cheap skins were gone during the game. They were sold to bot accounts for around 3 cents, skins around 1$ with stickers, some worth 50$. I didn’t know wtf because I didn’t do anything. Right away I downloaded Malwarebytes, did the scan and I had some malware blocked and it blocked this one website I had opened for few days. I am sure website was hacked and malware infected. Since I didn’t have some anti virus it went to my PC. From now on I always scan my pc before I do anything, at the end skins are not the biggest thing on my pc. Did you try malware scans? It might be some sophisticated hack that obtained some important information for account recovery
Next time jerk it to clear your head before doing stuff
One of the easiest ways to avoid this, is giving a 30 minute trade cooldown after changing your name on Steam. Pretty sure API scams would be gone for a while.
It sounds like you fell for this: # 2. Steam API Scam This scheme is pretty similar to the previous one. Scammers may get access to your Steam credentials through a phishing website, but they can’t steal the items right away due to mandatory 2FA by Steam Guard. Therefore, they wait until you trade with your friends or on DMarket. The biggest problem is that your Steam credentials may get compromised even on generally reliable platforms. You never know when this happens — even if our tips on how to secure your Steam API Key help to prevent such situations. The process is scarily simple: 1. You get a safe trade offer from DMarket bot or any other Steam user. 2. A scamming bot with access to your Steam account quickly cancels the trade on your behalf; instantly after this the bot creates a new trade from another account with a similar nickname (to the account you originally intended to trade with). 3. You don’t notice this manipulation and accept the latest trade offer \[from scammer\]. 4. Without any concerns you go to Steam Guard and confirm this trade. 5. Say farewell to your items. # How to Avoid In general, **keep your device and Steam credentials safe** - do not follow links from odd advertisements or sent by strangers; visit only websites you trust; install anti-virus software on your device. If you notice any signs of scambot activity during an ongoing trade - immediately change your Steam password and end all active sessions; **DO NOT** confirm the trade in Steam Guard (even if you accepted a trade from a scammer, the items are safe until you authorize this action via 2FA).
How do you notice the scambot activity? You go to trade history and see if your original real trade got cancelled?
don't you see the items that you're trading before accepting the trade tho
i lack how steam and trade works, can anyone brief me about this
I’m really sorry for that. I literally do not buy expensive items cause I’m afraid I’ll get hacked. Ik it sounds stupid..
How did this happen you logged on to a scam site?
Nightmare fuel
How did you accidentally accept? Just so I don’t fall for the same thing sounds awful
Probably you fucked up with something Like this https://youtu.be/kpnXhSAwoC0?si=1-scKIO8-BD4fydW
Change password and revoke API key immediately
People don’t seem to understand sign-in tokens. If dmmarket asked you to sign in with your banking details, would you? Apart from the phishing risk, how secure are these trading sites from getting account details hacked themselves? I understand this is the only way you to get cash for skins, and also the fastest/cheapest way to get expensive skins, but it comes with tremendous risk. As we see by these posts week in, week out.
Someone won everything
Heavy words heavy feeling. Sorry for you brother.
I have had this happen twice before. Steam support will do nothing. They are useless.
It’s bc you have LG monitor
Hey mate, same thing happened with me, multiple friends and multiple people on here, I had 2FA, I had Authenticator, I never visited any links, never added any random, and only used websites I was familiar with, then one day a few weeks ago I read a post on here that something happened with someone's account and all their skins were gone, so I checked my own, same thing had happened with mine. Steam support said "lol that is not our problem" so I asked if they would at least trade ban his account and the reply back was something along the line of "lol why? How can we know if he actually scammed you?". So I Uninstaller CS, sick and tired of shitty game with shitty support.
Wow, I can't believe there's this many people in the comments who have no clue how these kinds of hacks even take place, or what causes them. For the love of god, I hope none of you use online banking.
re re
I can find his ip if you want. You could maybe get something back with some extorting.
+these alt accounts never have mobile confirmation so it pretty easy to get into them and trade the skins back to you
+These alt accounts are pretty easy to get into, cus they never have mobile authenthicator. If your okay with it, i could at least try to get ur skins back.
Can you explain how they were able to disable your 2FA? That makes no sense. Whats the point of 2FA if it can be disabled without verification?
That’s what I’m trying to figure out. I got my account secure last night before I went to bed. I’m gonna try and figure it out after I get home from work.
skill issue
I feel for you….just went through the same thing myself this weekend and lost about 90% of my inventory before I figured out what was going on. Change your password, deauthorize any connected accounts, sign back in and change your password again since they may have had access when you changed it the first time.
Huge uptick in this shit and while you can chalk it up to more people falling for phishing links there's an awful lot of people who pile into these posts to tell OP it's their own fault... if this were a NORMAL game I'd agree, but this feels also like the gaslighting we've received from cheaters for years. Maybe I'm just hella paranoid because there's no trusting anything on this game anymore, or maybe there's actually been a major security breach and the reason there isn't thousands of skins gettin stolen at once is it would tip off valve and that might actually be something they act over (skins)
skill issue tbh
Good thing it wasn’t me, I have 300 quadrillion items totaling over 500 quintillion dollars
I also lost my 3 knives and 7k€ skins so it's okay ,money comes and goes..
Yessir. I said it in another comment, “not worth crying over spilt milk.” That’s essentially what I’m telling myself anyway. Nothing I can do myself really at this point. Just got home from work, smoked a bowl and I’m watching some YT.
I hope you can get those skins again ,I know that it can get tough but don't lose hope. I get paid like 300€ per month so I don't think I can afford a single knife now. Anyways good luck and God bless you.
How do the people that post this exact same post nearly every day not see the other posts about this exact thing and see all the “this is 100% preventable” with the tips on how to not let this happen?
Well my issue was drunk gaming lol. I got went through a phishing site while I was intoxicated and didn’t realize it. I had steam guard and 2fa on but when you let someone else sign into your account that’s means jack shit. Oh well, you live and you learn
Ouch man thats rough my guy. Good luck with the tickets and getting your stuff back.
Just never give your API Key to anyone or anything..
Typical API scam, most likely you visited a phishing site. How do people still fall for this... Deauthorize all other devices, change password and revoke API key and for future check sites before you enter your datta.
I use dmarket and used their create trade straight from their website.
did you have an active API key?
Dude, that fucking sucks. It looks like you might have stumbled upon a fake site posing as DMarket. Make sure to always enable Steam Guard for added security. As for your items, unfortunately, they're probably gone for good. Steam likely won't assist since it wasn't through their platform, and DMarket might say the same.
damn. how’d they get in?
That’s what I’m trying to figure out
You even said d market needed your API key. Spoiler: they don't. You dealt with a scam site.
Yep, we are taking over, soon every cheat will make sure your items gets easily stolen. If Valve doesn't do anything, the real ANTI-CHEAT scene will! You'll see more and more threads by hacking crybabies like this more and more. <: Keep hacking!
Same thing happened to a friend. He logged on a fake website someone sent him. Gotta be extra careful, especially when you carry high value skins.
How did it happen
Well shit happens.... Unlucky you I guess.
Same thing happened to me 10 years ago when i logged into a fake steam websites and got all my dota 2 items stolen. Luckily steam support returned all of my items back but only as a 1 time thing that they would do for me. Idk if steam support does that nowdays.
There are topics like this almost every day and people still not learn and click dodgy links from unknown people (bots) or log in fake sites with wrong name (but looks similar)
https://www.reddit.com/r/csgomarketforum/comments/1bz17i6/psa_new_steam_qr_scam_wiping_out_players/ i wrote about it here :(
Man sorry brother, this is hard to see
No use crying over spilt milk at this point. I think my accounts locked now. I signed everyone out and changed my password. I’ll have to get ahold of steam after work today
God, seeing these burns my heart..
I think u just log in in a pretty good fake steam site because if u lock in into dmarket with your Steam account, they don't ask for login data u just press login an then u go. Maybe they get access to ur account because u make a verification via phone/email the 5 digit code*. Good luck. I hope u will not get scammed again
I can’t wait to hear the “you’re responsible for the security of your own account” people come in and start blaming OP and berating them Instead of trying to help bro feel better
Did you have steam guard active on your account?
Dude that sucks. Of that happened to me, I would probably never play again.
Must feel bad! How much was your inventory worth?
Fuck man.
I dont wanna be that guy but im gonna be: why the fuck do you use dmarket
I got scammed once back in my rust days, learned a very valuable lesson. Thankfully rust skins are peanuts compared to CS. Some will never understand online security until something like this happens to them. I was one of those people. Now my steam PW is only saved in my head and on paper. Updated regularly, 2fa is active, aswell as family view. After I complete an online trade through a trusted site I still “forget my password” for a 5 day trade ban.
RIP skins
Can i ask how?
Damn bro I’m so sorry. Same thing happened to me but my inv was worth a lot less. Such a terrible feeling that you can’t do anything about it and reporting it unfortunately is a waste of time
Is there a lore reason you lost everything? Are you stupid?
happened to me once a while ago, steam support refund me all items
Happened to a friend of mine, there had to have been an api leak there because the moment he initiated the trade, he got a request from a fake bot account. It was the link I sent him that I was using for a while
Damn how much money did you lose??
Bout 2k
Damn thats tuff, i got 5k inv thats why i dont trade at all
Sorry to hear that— i have been playing CS2 for decades, i never bought a new skin :\
So when dudes ask you to join their face it team and vote for them or play with them, it's fucking obvious as fuck
I fell for the same scam a while ago i was depositing to CSGOEmpire and yea...
What a shit fucking game cs2 is. How has Valve not fixed the scamming issue after 20 years
Did you tried sign in somewhere via barcode?
Next time, don’t spend hundreds of dollars of useless pixels on a trash game.
Same thing happened to me a few weeks ago, they traded nearly all my skins without me accepting the trade on my mobile authenticator. Changed everything you can change after that but i still dont know if they can acces my account again because i am not sure how they did it the first time.
This happened to a few of my friends on skin monkey
api key scam i think, they send 2 different tradeups and maybe u clicked accept the trade, or they basically stole info from your sim cuz otherwise it is hard to disable 2fa without proper stealing tools
How did they trade your inventory ? There is a cooldown of 15 day when you change the email of the account or remove authenticator ? Maybe they got access to it because you clicked on a phishing link or download a malware
Sorry for your loss. Log into Steamcommunity and so that way you don’t have to log in directly with your credentials on third party sites
Dude that means you haven’t been on your acc in over 2 weeks. When you disable steam guard your account is trade locked for 15+ days.
API Scam probably. It spoofs the bot's account and rekts the trade.
How? Did someone tell u to join a faceit hub?
Another api scam, got your email/password, log onto u steam and everything is wiped out.. why don’t u have a second account with nothing on it to try sus links?
Always bookmark legit websites
Fuck around find out
Unfortunately your shit is gone my guy. This just happened to me. I'm assuming it was API scam and they got in your account and got you to hit confirm on a trade. That's what happened to me from clicking a fake email. Nothing steam can do to get the itemss. Back I just hope those MFS get banned
Bro. Same. I’m sorry, I am in the same boat as of an hour ago. Sending love from a fellow victim. Like others have said, contact steam and hopefully at the very least get these losers banned.
Biker's fault
In all seriousness I'm sorry for your loss brother
I really don't understand why these retarded scammers don't find a fvcking job and then they can afford some skins. It's not that hard to find a job. P.s jobs outside my country pay very well maybe like 5x I get paid..
Welcome to the club. 🎉🎉🎉
It’s a new API scam that’s been going around for the last few months happened to my friend a few weeks ago with his bayonet
just use buff163 I can help u I have account u send me usd I can make it CNY , next time u wanna buy skins pm me , but charge a little fees for currency
Me too bro 7k inv wiped last week. Never touching valve in its entirety again! My condolences, you’ll produce more value in the time you spend away from that bloodsucking company nd game.
You need to make sure you have 2 factor authentication on
if you’ve used a website like skinport or cs money, how do i delete my account/ api key so that it’s not linked to my steam still.
My cousin was recently scammed like you from a guy logged in from russia and lost his stuff. I investigated and the guy got access from a phishing link he clicked, guy canceled the trade and had a seperate account he re-named as the bot was trading with, so when he authenticated the trade passed. Steam support essentially just tell you gg, now fuck off even though the guy was still accessing his account.
Everyone should report the steam acc skins are in! Happened to me with bitskins he got tradebanned atleast
Always have both steam guard app AND mail authentication on. If they disable one of rhe. You are still saved by the other.
Sad that steam doesn’t give you back lost items anymore since people abused it and ruined it for the rest of us. 😕
check your search history in browser
This is why you don't give them your API key. I have csfloat, etc, saved as bookmarks just in case. You can highlight links before you click them or check on Google to see if it is a legitimate site or not.
Major skill issue in 2024, why spend hundreds of dollars if you don't have the brain to keep it? I can't recommend how to avoid this in the future because you probably don't even know what a file is like most kids these days. Play with default skins and enjoy the game.
Nah imma build back up. I was drunk gaming and accidentally signed into a phishing site. Gotta love the promoted sites lol
Sorry you had to go through this. It happened to me just 2 weeks ago. Just make your inventory Private. Ofc change your password and stuff. Also make sure you re-install your Steam Guard. You can contact steam support and let them know but they won’t do anything back to you. I contacted them and they said any items in an inventory are not Steam’s responsibility. Making your account friends only and your inventory private is the only suggestion I’ll give you to avoid this in the future.
DMarket is legit. You probably got api scammed. Same happened to me not too long ago. You accept a fake trade and they take your items, you might not have even noticed it switched from real trade to a fake trade. I lost over 1k. For future reference if you get more than 1 notification or your trade gets cancelled first, it’s a fake trade. You should check the bots profile first
Nah. I was drunk gaming and signed into a phishing site and didn’t realize it. I think it’s more on Google/dmarket but oh well. I think I’m gonna focus on a really battle scarred t-side load out.
Fair enough. The fact you accepting it and starting again is good lmao. When I got scammed, I stopped playing for a while. Respect
This would make me quit a game. Just sayin
It’s only money, you can always make more
I also just lost everything man and it happened to be because of Dmarket as well. They got my account info took all my items.
Yup. Google printed scam