Or you could keep your account and devices secure.

I mean if someone already got into your account, seems redradent to ask for a mobile confirmation on that
I mean what is someone going to buy? a game? best they can do with that is gift it, and that can be refunded
Like where dose this even help? on trades you already have that becouse that is user to user exstage not user to developer money set up, and that is more messy to return back on

So this seem a little pointless except if I am miss understanding something

Originally posted by Black Blade:

that can be refunded

Except once send recipient has to initiate refund or reject the gift. Sender can do nothing once the gift is sent. How high do you think the changes are for scammer initiating refund when you politely ask them?

But otherwise you're correct. It's far too late to consider or implement additional security measures when hijacker already has control of your account. They can do anything the original account creator can and then some (like automating things like trades or rejections/confirmations by using bots).

Originally posted by Black Blade:

I mean if someone already got into your account, seems redradent to ask for a mobile confirmation on that
I mean what is someone going to buy? a game? best they can do with that is gift it, and that can be refunded
Like where dose this even help? on trades you already have that becouse that is user to user exstage not user to developer money set up, and that is more messy to return back on

So this seem a little pointless except if I am miss understanding something

我被盗余额的时候账号密码都没有被改，而且没有任何提示，我没有泄露账号密码给骗子，但是余额被用来买饰品了，我觉得是类似病毒之类的东西，只盗了余额没有盗走账号，在像wallpaper这种有创意工坊的软件游戏里可以订阅exe程序，都可能发生这种情况

ai English:My balance was stolen without my account password being changed, and I received no alerts. I didn't disclose my account password to any scammer, but the balance was used to purchase in-game cosmetics. I suspect it was something like a virus that only stole the balance without taking the entire account. This could happen in software or games with workshops, like Wallpaper Engine, where subscribing to executable programs might lead to such situations.

Originally posted by Anonymous Helper:

Except once send recipient has to initiate refund or reject the gift. Sender can do nothing once the gift is sent. How high do you think the changes are for scammer initiating refund when you politely ask them?

But otherwise you're correct. It's far too late to consider or implement additional security measures when hijacker already has control of your account. They can do anything the original account creator can and then some (like automating things like trades or rejections/confirmations by using bots).

Your thinking in the user level, I am talking about the admin level
Store items, and games can be refunded with lose of money for the developer/publisher, but that is done with little to no hassle, its a one on one transaction, easy to clear out and fix if needed
Its why the confimation is on the trades, its a trade can eb traded with someone else, meaniung you have more then two partys possible, and one of the may not at all be at fault (like they traded legit and fair)

Originally posted by 身上有空调的承太郎:

我被盗余额的时候账号密码都没有被改，而且没有任何提示，我没有泄露账号密码给骗子，但是余额被用来买饰品了，我觉得是类似病毒之类的东西，只盗了余额没有盗走账号，在像wallpaper这种有创意工坊的软件游戏里可以订阅exe程序，都可能发生这种情况

ai English:My balance was stolen without my account password being changed, and I received no alerts. I didn't disclose my account password to any scammer, but the balance was used to purchase in-game cosmetics. I suspect it was something like a virus that only stole the balance without taking the entire account. This could happen in software or games with workshops, like Wallpaper Engine, where subscribing to executable programs might lead to such situations.

Well where did the money go? becouse scammers dont do it or fun, they do it to earn someting, so did they try to trade this items to them self? is the game it self maybe a scam? where is there profit?

Also Its most likely you login Steam on a site that is not Steam, they don't need to change your password there, they just use your confimation on the fake site to get in, and run what ever they need to run to steal what ever they want to steal or do, no password changes needed

You may not have even realized it happen, it could be one of the fake "Giveaways" or maybe you where asked to vote on a friends thing

Never login to Steam on any website you did not open your self, meaning you need to log in to Steam? open your own page of Steam, login, and it should show you login, if it dose not its likely not Steam and someone is trying to cheat you
Sounds like you most likely fell for one of them

It's not necessarily a giveaway of Steam credentials. It can also be malware that stole your Steam session token. This also bypasses Steam Guard.

Originally posted by Black Blade:

Originally posted by Anonymous Helper:

Except once send recipient has to initiate refund or reject the gift. Sender can do nothing once the gift is sent. How high do you think the changes are for scammer initiating refund when you politely ask them?

But otherwise you're correct. It's far too late to consider or implement additional security measures when hijacker already has control of your account. They can do anything the original account creator can and then some (like automating things like trades or rejections/confirmations by using bots).

Your thinking in the user level, I am talking about the admin level
Store items, and games can be refunded with lose of money for the developer/publisher, but that is done with little to no hassle, its a one on one transaction, easy to clear out and fix if needed
Its why the confimation is on the trades, its a trade can eb traded with someone else, meaniung you have more then two partys possible, and one of the may not at all be at fault (like they traded legit and fair)

Originally posted by 身上有空调的承太郎:

我被盗余额的时候账号密码都没有被改，而且没有任何提示，我没有泄露账号密码给骗子，但是余额被用来买饰品了，我觉得是类似病毒之类的东西，只盗了余额没有盗走账号，在像wallpaper这种有创意工坊的软件游戏里可以订阅exe程序，都可能发生这种情况

ai English:My balance was stolen without my account password being changed, and I received no alerts. I didn't disclose my account password to any scammer, but the balance was used to purchase in-game cosmetics. I suspect it was something like a virus that only stole the balance without taking the entire account. This could happen in software or games with workshops, like Wallpaper Engine, where subscribing to executable programs might lead to such situations.

Well where did the money go? becouse scammers dont do it or fun, they do it to earn someting, so did they try to trade this items to them self? is the game it self maybe a scam? where is there profit?

Also Its most likely you login Steam on a site that is not Steam, they don't need to change your password there, they just use your confimation on the fake site to get in, and run what ever they need to run to steal what ever they want to steal or do, no password changes needed

You may not have even realized it happen, it could be one of the fake "Giveaways" or maybe you where asked to vote on a friends thing

Never login to Steam on any website you did not open your self, meaning you need to log in to Steam? open your own page of Steam, login, and it should show you login, if it dose not its likely not Steam and someone is trying to cheat you
Sounds like you most likely fell for one of them

余额被用来买他的垃圾去了，钱给他而你得到的垃圾一文不值，我是因为wallpaper创意工坊里订阅的程序类型的物品被盗走的余额，你下面说的情况我肯定没发生过，陌生人加我好友我一个都没同意
ai English:The balance was used to buy his junk. He got the money, and what you received was worthless. My balance was stolen because I subscribed to program-type items in the Wallpaper Workshop. The situation you described definitely didn't happen to me—I never accepted any friend requests from strangers.

Originally posted by Black Blade:

Originally posted by Anonymous Helper:

Except once send recipient has to initiate refund or reject the gift. Sender can do nothing once the gift is sent. How high do you think the changes are for scammer initiating refund when you politely ask them?

But otherwise you're correct. It's far too late to consider or implement additional security measures when hijacker already has control of your account. They can do anything the original account creator can and then some (like automating things like trades or rejections/confirmations by using bots).

Your thinking in the user level, I am talking about the admin level
Store items, and games can be refunded with lose of money for the developer/publisher, but that is done with little to no hassle, its a one on one transaction, easy to clear out and fix if needed
Its why the confimation is on the trades, its a trade can eb traded with someone else, meaniung you have more then two partys possible, and one of the may not at all be at fault (like they traded legit and fair)

Originally posted by 身上有空调的承太郎:

我被盗余额的时候账号密码都没有被改，而且没有任何提示，我没有泄露账号密码给骗子，但是余额被用来买饰品了，我觉得是类似病毒之类的东西，只盗了余额没有盗走账号，在像wallpaper这种有创意工坊的软件游戏里可以订阅exe程序，都可能发生这种情况

ai English:My balance was stolen without my account password being changed, and I received no alerts. I didn't disclose my account password to any scammer, but the balance was used to purchase in-game cosmetics. I suspect it was something like a virus that only stole the balance without taking the entire account. This could happen in software or games with workshops, like Wallpaper Engine, where subscribing to executable programs might lead to such situations.

Well where did the money go? becouse scammers dont do it or fun, they do it to earn someting, so did they try to trade this items to them self? is the game it self maybe a scam? where is there profit?

Also Its most likely you login Steam on a site that is not Steam, they don't need to change your password there, they just use your confimation on the fake site to get in, and run what ever they need to run to steal what ever they want to steal or do, no password changes needed

You may not have even realized it happen, it could be one of the fake "Giveaways" or maybe you where asked to vote on a friends thing

Never login to Steam on any website you did not open your self, meaning you need to log in to Steam? open your own page of Steam, login, and it should show you login, if it dose not its likely not Steam and someone is trying to cheat you
Sounds like you most likely fell for one of them

如果你说这个手机上确认支付没用，那么我觉得把物品放到市场上要用手机确认，steam也没必要添加这个功能
ai English:If you say that confirming payments on the phone is useless, then I don't see why Steam would need to add a feature that requires phone confirmation for listing items on the market.