If you have access to the account

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://gtm.steamproxy.vip/dev/apikey (there should be nothing in the APIKEY)
6. If points were stolen, do a password RESET to cancel the awards/points before they are delivered


Please review how you are logging into Steam or handling your log in information. You somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

after you have secured the account, report any accounts involved thru their profile. if they contacted you thru another service (discord) report the account to that service.