RANU 29 Jan @ 10:49pm
Steam Guard Failed, No SMS Received, Steam Support Ignoring Evidence
Hello everyone,

I’m posting this because I lost about €100 worth of items due to a Steam security failure, and Steam Support refuses to acknowledge the issue despite clear proof.

What happened:
On January 16, my Steam account was compromised after I mistakenly entered my login details on a phishing site.
I followed all Steam security instructions: changed passwords, reinstalled my OS, scanned for malware, and re-enabled Steam Guard.
Steam Support confirmed my account was secure after these steps.

The problem:
On January 16 at 02:59:22 PST, Steam claims an SMS was sent to my phone to transfer my Mobile Authenticator.
I NEVER RECEIVED THIS SMS.
Despite this, my Steam Guard was removed, and my entire inventory was stolen.

My concerns:
How was my Steam Guard removed if I never received the SMS?
How did the attacker gain access to my phone authenticator when I only used my PC on the phishing site?
Why did Steam Support tell me my account was secure if it wasn’t?
If this was a Steam Guard failure, why am I not getting at least some compensation?

Steam Support keeps ignoring these questions and just repeats their “we don’t restore items” policy. I understand that, but this wasn’t just a phishing mistake—this was a security failure on Steam’s side.

I am now publicly sharing this case so other users can be aware of the risks on all of my social media.

Has anyone else experienced something similar? How can I ensure my account is truly safe?

Thanks for any advice.
< >
Showing 1-15 of 23 comments
Runkel 29 Jan @ 11:00pm 
Originally posted by RANU:
Steam security failure
Originally posted by RANU:
I mistakenly entered my login details on a phishing site.
I drank a bottle of bleach the other day because the child-proof cap on the bottle failed.
Last edited by Runkel; 29 Jan @ 11:00pm
Originally posted by RANU:
I mistakenly entered my login details on a phishing site.
The correct sentense is "I knowingly entered my login details on a phishing site"
RANU 30 Jan @ 12:23am 
Originally posted by Princess Luna:
Originally posted by RANU:
I mistakenly entered my login details on a phishing site.
The correct sentense is "I knowingly entered my login details on a phishing site"

This isn't the issue please read again.
RANU 30 Jan @ 12:24am 
Originally posted by Runkel:
Originally posted by RANU:
Steam security failure
Originally posted by RANU:
I mistakenly entered my login details on a phishing site.
I drank a bottle of bleach the other day because the child-proof cap on the bottle failed.

Yes, I made the mistake of entering my details on a phishing site. But the real issue is that even after securing my account, Steam Guard was removed without me receiving the required SMS code. That’s a security failure, and Steam Support is ignoring the proof I provided. If you only want to mock me instead of discussing the actual problem, don’t bother replying.
KarmaKrazi 30 Jan @ 12:51am 
Originally posted by RANU:
Originally posted by Princess Luna:
The correct sentense is "I knowingly entered my login details on a phishing site"

This isn't the issue please read again.

It is the issue though. You essentially gave someone the keys to your house, and then was surprised someone robbed you. Then you were frustrated that someone else entirely isn't giving you compensation for your bad decisions.
RANU 30 Jan @ 1:17am 
Originally posted by KarmaKrazi:
Originally posted by RANU:

This isn't the issue please read again.

It is the issue though. You essentially gave someone the keys to your house, and then was surprised someone robbed you. Then you were frustrated that someone else entirely isn't giving you compensation for your bad decisions.


No, it’s more like I changed my locks, installed an alarm system, and was told by security that my house was safe—only to wake up and find someone inside anyway, without any sign of forced entry. Then, when I ask how it happened, they just shrug and say it's my fault. That’s the issue here
RANU 30 Jan @ 1:21am 
Steam Guard was hacked, not me. I never received the SMS code they claim was sent. There’s no malware on my phone, and yet somehow, the hacker redirected the code from my number and took over my authenticator. I have no idea how they did it, and there’s nothing I can do to prevent it from happening again. My account was under review for 5 days, and Steam Support assured me multiple times that I was secured and had done everything correctly. Clearly, that wasn’t true."
Steam Guard is an extra security layer - it does NOT prevent you from being compromised. It also doesn't act as a magical shield fallback if you do end up giving away all your credentials and then authenticating full account access. There is also no such thing as 'account under review' from support so clearly you have been further talking to scammers and were baited into giving away more information which enabled them to facilitate their intended scam.

You can't rely on any two-factor mechanism to bail you out of any account hijacking on any site because scammers can make bad things happen beyond simply taking an account.
RANU 30 Jan @ 2:26am 
Originally posted by J4MESOX4D:
Steam Guard is an extra security layer - it does NOT prevent you from being compromised. It also doesn't act as a magical shield fallback if you do end up giving away all your credentials and then authenticating full account access. There is also no such thing as 'account under review' from support so clearly you have been further talking to scammers and were baited into giving away more information which enabled them to facilitate their intended scam.

You can't rely on any two-factor mechanism to bail you out of any account hijacking on any site because scammers can make bad things happen beyond simply taking an account.

"There is also no such thing as 'account under review' from support so clearly you have been further talking to scammers and were baited into giving away more information which enabled them to facilitate their intended scam. " - IS THIS TRUE?

I’m feeling really overwhelmed and frustrated right now, and I’m hoping to get some help or advice. I noticed someone had logged into my Steam account, so I immediately submitted a support ticket. Just a minute after I noticed, I received a message from a Steam profile that appeared to be "Steam Community Service." The text was highlighted in blue, and it looked official to me, something I hadn’t seen before. They assured me that everything was secure. I asked several times what I should do, and they told me to wait 5 days.
After those 5 days, I received another message from the same profile. They asked if everything was okay, and I again asked if I was safe. They reassured me that everything was fine and I had done the necessary steps.
The next day, I logged in and found that all my items were gone. I submitted another ticket, but then my previous tickets started disappearing, including one I made on January 16th. It seems like they were deleted. I was then contacted by a fake profile, who added me to their friend list and acted like they were real support. I even mentioned that I’m dealing with stage 3 cancer, and all of this has been extremely stressful for me.
I feel so bad right now. I didn’t realize the Steam support wouldn’t respond to me in the chat window. I was under a lot of stress and believed them. But now I don’t trust anything anymore.
I’ve changed my password, reinstalled Windows, deauthorized my account, and signed back into my authenticator. But I’m still not sure if they’re still in my account. I just feel so lost, and I can’t shake the shame of not realizing sooner. I was literally waiting 5 days, thinking I was secure.
If anyone has advice or has been through something similar, I’d really appreciate any help. Thanks for listening.
Originally posted by RANU:
Originally posted by J4MESOX4D:
Steam Guard is an extra security layer - it does NOT prevent you from being compromised. It also doesn't act as a magical shield fallback if you do end up giving away all your credentials and then authenticating full account access. There is also no such thing as 'account under review' from support so clearly you have been further talking to scammers and were baited into giving away more information which enabled them to facilitate their intended scam.

You can't rely on any two-factor mechanism to bail you out of any account hijacking on any site because scammers can make bad things happen beyond simply taking an account.

"There is also no such thing as 'account under review' from support so clearly you have been further talking to scammers and were baited into giving away more information which enabled them to facilitate their intended scam. " - IS THIS TRUE?

I’m feeling really overwhelmed and frustrated right now, and I’m hoping to get some help or advice. I noticed someone had logged into my Steam account, so I immediately submitted a support ticket. Just a minute after I noticed, I received a message from a Steam profile that appeared to be "Steam Community Service." The text was highlighted in blue, and it looked official to me, something I hadn’t seen before. They assured me that everything was secure. I asked several times what I should do, and they told me to wait 5 days.
After those 5 days, I received another message from the same profile. They asked if everything was okay, and I again asked if I was safe. They reassured me that everything was fine and I had done the necessary steps.
The next day, I logged in and found that all my items were gone. I submitted another ticket, but then my previous tickets started disappearing, including one I made on January 16th. It seems like they were deleted. I was then contacted by a fake profile, who added me to their friend list and acted like they were real support. I even mentioned that I’m dealing with stage 3 cancer, and all of this has been extremely stressful for me.
I feel so bad right now. I didn’t realize the Steam support wouldn’t respond to me in the chat window. I was under a lot of stress and believed them. But now I don’t trust anything anymore.
I’ve changed my password, reinstalled Windows, deauthorized my account, and signed back into my authenticator. But I’m still not sure if they’re still in my account. I just feel so lost, and I can’t shake the shame of not realizing sooner. I was literally waiting 5 days, thinking I was secure.
If anyone has advice or has been through something similar, I’d really appreciate any help. Thanks for listening.

It sucks man but take this as a learning experience. You now know, what not to do and what a fake support agent looks like.

With your account having been compromised, if you DID send an actual ticket, the ticket would've been deleted by the hijacker/scammers to prevent you from actually getting help. That way they can lead you to a fake agent.

For future reference, this is what a ticket/reply from Steam Support actually will look like.
https://gtm.steamproxy.vip/sharedfiles/filedetails/?id=2995029816

Edit: I'm currently at work so if you want me to discuss this type of thing in more detail with you, you can feel free to add me. Regardless, sorry you ended up going through all that.

Do NOT be ashamed, this kind of thing happens to A LOT of people in all walks of life, young and old. Scammers/Hijackers of all kinds reach out to everyone they can, and will not hesitate to take advantage of any opportunity/vulnerability they find.
Last edited by Sasori Kigaru; 30 Jan @ 2:33am
There was no failing with the security offered by Valve.

Originally posted by RANU:
Yes, I made the mistake of entering my details on a phishing site.

Accounts on Steam are PHISHED because the end user giving away all their account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code, or scanning the QR code or authorising via fingerprint giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link, signing in through a fake login window etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

The weakest link is the end user, not the security offered.
RANU 30 Jan @ 2:53am 
Originally posted by Sasori Kigaru:
Originally posted by RANU:

"There is also no such thing as 'account under review' from support so clearly you have been further talking to scammers and were baited into giving away more information which enabled them to facilitate their intended scam. " - IS THIS TRUE?

I’m feeling really overwhelmed and frustrated right now, and I’m hoping to get some help or advice. I noticed someone had logged into my Steam account, so I immediately submitted a support ticket. Just a minute after I noticed, I received a message from a Steam profile that appeared to be "Steam Community Service." The text was highlighted in blue, and it looked official to me, something I hadn’t seen before. They assured me that everything was secure. I asked several times what I should do, and they told me to wait 5 days.
After those 5 days, I received another message from the same profile. They asked if everything was okay, and I again asked if I was safe. They reassured me that everything was fine and I had done the necessary steps.
The next day, I logged in and found that all my items were gone. I submitted another ticket, but then my previous tickets started disappearing, including one I made on January 16th. It seems like they were deleted. I was then contacted by a fake profile, who added me to their friend list and acted like they were real support. I even mentioned that I’m dealing with stage 3 cancer, and all of this has been extremely stressful for me.
I feel so bad right now. I didn’t realize the Steam support wouldn’t respond to me in the chat window. I was under a lot of stress and believed them. But now I don’t trust anything anymore.
I’ve changed my password, reinstalled Windows, deauthorized my account, and signed back into my authenticator. But I’m still not sure if they’re still in my account. I just feel so lost, and I can’t shake the shame of not realizing sooner. I was literally waiting 5 days, thinking I was secure.
If anyone has advice or has been through something similar, I’d really appreciate any help. Thanks for listening.

It sucks man but take this as a learning experience. You now know, what not to do and what a fake support agent looks like.

With your account having been compromised, if you DID send an actual ticket, the ticket would've been deleted by the hijacker/scammers to prevent you from actually getting help. That way they can lead you to a fake agent.

For future reference, this is what a ticket/reply from Steam Support actually will look like.
https://gtm.steamproxy.vip/sharedfiles/filedetails/?id=2995029816

Edit: I'm currently at work so if you want me to discuss this type of thing in more detail with you, you can feel free to add me. Regardless, sorry you ended up going through all that.

Do NOT be ashamed, this kind of thing happens to A LOT of people in all walks of life, young and old. Scammers/Hijackers of all kinds reach out to everyone they can, and will not hesitate to take advantage of any opportunity/vulnerability they find.


I added you, thank you. I would really like to ask you few more things about security.
Originally posted by RANU:
Originally posted by J4MESOX4D:
Steam Guard is an extra security layer - it does NOT prevent you from being compromised. It also doesn't act as a magical shield fallback if you do end up giving away all your credentials and then authenticating full account access. There is also no such thing as 'account under review' from support so clearly you have been further talking to scammers and were baited into giving away more information which enabled them to facilitate their intended scam.

You can't rely on any two-factor mechanism to bail you out of any account hijacking on any site because scammers can make bad things happen beyond simply taking an account.

"There is also no such thing as 'account under review' from support so clearly you have been further talking to scammers and were baited into giving away more information which enabled them to facilitate their intended scam. " - IS THIS TRUE?

I’m feeling really overwhelmed and frustrated right now, and I’m hoping to get some help or advice. I noticed someone had logged into my Steam account, so I immediately submitted a support ticket. Just a minute after I noticed, I received a message from a Steam profile that appeared to be "Steam Community Service." The text was highlighted in blue, and it looked official to me, something I hadn’t seen before. They assured me that everything was secure. I asked several times what I should do, and they told me to wait 5 days.
After those 5 days, I received another message from the same profile. They asked if everything was okay, and I again asked if I was safe. They reassured me that everything was fine and I had done the necessary steps.
The next day, I logged in and found that all my items were gone. I submitted another ticket, but then my previous tickets started disappearing, including one I made on January 16th. It seems like they were deleted. I was then contacted by a fake profile, who added me to their friend list and acted like they were real support. I even mentioned that I’m dealing with stage 3 cancer, and all of this has been extremely stressful for me.
I feel so bad right now. I didn’t realize the Steam support wouldn’t respond to me in the chat window. I was under a lot of stress and believed them. But now I don’t trust anything anymore.
I’ve changed my password, reinstalled Windows, deauthorized my account, and signed back into my authenticator. But I’m still not sure if they’re still in my account. I just feel so lost, and I can’t shake the shame of not realizing sooner. I was literally waiting 5 days, thinking I was secure.
If anyone has advice or has been through something similar, I’d really appreciate any help. Thanks for listening.
There is no such thing as 'Steam Community Service' and any other account messaging you is a scam or part of the scam. Tickets disappearing means the scammers were deleting them and profiles claiming to be from Support were the scammers also. Basically a scam like this requires them to get access to your account (the phished credentials) and for them to facilitate their scams, they require human input which it seems they were successful with because you likely gave them key information thinking they were Support. Steam Guard cannot protect against this.
Runkel 30 Jan @ 5:40am 
Originally posted by RANU:
Steam Guard was hacked, not me.

NO, just NO. Literally NOBODY was HACKED. You fell for a phishing scam, and instead of learning how to avoid future scams, you’re blaming everyone else.

There’s a reason why so many users, including me, are frustrated, sick, and tired of your post. Valve offers everything needed to protect your account, yet people still manage to get phished and then try to shift the blame to Valve.

A security system is only as strong as its weakest link. In this case (and sadly, in many others), the weakest link is the user... YOU.
RANU 30 Jan @ 7:12am 
Originally posted by Runkel:
Originally posted by RANU:
Steam Guard was hacked, not me.

NO, just NO. Literally NOBODY was HACKED. You fell for a phishing scam, and instead of learning how to avoid future scams, you’re blaming everyone else.

There’s a reason why so many users, including me, are frustrated, sick, and tired of your post. Valve offers everything needed to protect your account, yet people still manage to get phished and then try to shift the blame to Valve.

A security system is only as strong as its weakest link. In this case (and sadly, in many others), the weakest link is the user... YOU.

You should read our conversation and keep your emotions back. I love Valve and I love steam. Dont be angry plz.
< >
Showing 1-15 of 23 comments
Per page: 1530 50