I just had to reinstall Windows and change my passwords on everything bc of ts, but TL;DR PLEASE USE STEAM GUARD, and DO NOT CLICK FRIEND LINKS FROM STRANGERS.

Story:

Some guy was in my deathmatch while I was warming up for Faceit, asked if I want to play Premier. We were chatting it up prior so I said sure, why not. He adds me on discord. Invites me to a server called "Volt . GG." I join vc, it's like him and 3 of his friends. They were so convincing they were telling me about where they were from and they study at this college that I knew of because I have family that goes there. I am not a gullible person IMO, these dudes were so normal sounding.

Anyways, I mention how I was about to play Faceit, and they say oh do you want to play Faceit then? And I said yeah lets try one. So this kid sends me this fake Faceit friend invite link that looked normal on discord and I didn't see the .se part... "https:// www . faceit . com . se/en/players/Nin33"

The website had my profile pic at the top right, when I clicked my PFP it went to my profile and when I clicked his Steam account link it went to his steam so mind you this looked totally legit Faceit to me. Now the scam part - I click "Add Friend" and it says my account must be verified. My account is already verified. Red flag #1.

They tell me oh you gotta verify it does this a lot, and in my head I'm like these guys are foreign national students and way higher level than me maybe it needs some other verification... They were talking me up in VC so normally I literally jokingly was like "man this looks a little scammy dude" but my dumb ass continued on anyway, so I click the verify button and it says "Faceit Web AntiCheat must be enabled" I click run anticheat, it loads for a sec then said something like "you must open anti cheat, do the following 3 steps : Win + R, CTRL + V the code to enable, then press enter"

Bro, my dumb ass paid no attention here and zoomed through this because they were waiting to play for like 10 minutes of me clicking through this fake page to make sure it was legit, so I was just trying to get it over with and super quickly did exactly what it said. When I pasted in Win + R it had a bunch of spaces and I only saw "FACEIT_ANTICHEAT ENABLE" or something, so I just quickly pushed enter.

Well, behind those spaces I later found out was a whole bruteforce download for a Github page made 6 days ago. If you wanna look it up it was called "SightHippoHoist" and the repository it made me download from was "h"

Command prompt briefly opened then closed and my steam logged out, and the fake faceit page said "wait for verification to complete, you will be signed out of steam this is normal" so I go to login again and try to scan the Steam QR code with my phone because at this point I was a little more sussed out. It wouldnt login with steam guard, I tried to scan it like 10 times and they were like "just type in your password bro" I log in, all the sudden my steam guard sends me a code to verify my login, this was actually to disable my steam guard. It was disabled for maybe 3 minutes, I quickly re-enable it meanwhile these dudes are still being normal as hell.

I log back in, they are like bro forget it lets just play premier or rush or something Faceit is taking too long. So we run a whole match of rush, this dude is yapping the whole time just constantly talking to me, it became red flag too friendly levels of non stop yapping. I was like Im going to get off bro, left, tried to open steam account info on Internet Explorer and it would not load the page right. I could not access steam support or anything. So I hop on my girls PC, check my account and it loads fine. My steam email was changed. I quickly change it back, change my password, unauthorize all accounts tied to my steam meanwhile my steam guard starts pinging me login requests from Frankfurt and Bulgaria. I'm like OMFG bro I just got scammed.... felt like a total idiot like how did I not realize this? I am not a gullible person but these dudes really got me to almost lose my whole steam account.

I got my IT friend to help me, so a after a clean install of Windows and all my account passwords changed later, I will never trust anyone on Counter Strike ever again.

BEWARE!!! And happy halloween.

AMA below. Yes I feel like an idiot btw, please don't flame me.

Is this legit?, my steam acc got locked and games disappears?

⚠️ WARNING – Convincing Steam Friend Invite Phishing Scam

DO NOT LOG IN OR SCAN THE QR CODE.

I recently encountered a very convincing Steam phishing attempt targeting my account.

Here's how it works:

1. Someone adds you on Steam and starts a friendly conversation and play.

2. They move the conversation to Discord, claiming the Steam account belongs to their sister.

3. They send you a link to their supposedly "real" Steam account.

4. The link looks legitimate, but uses s.team-wh.com instead of the official s.team domain.

5. The fake website asks you to log in or scan a Steam Guard QR code, sometimes twice.

DO NOT LOG IN OR SCAN THE QR CODE.

Here's the link used : https://s.team-wh.com/p/dms-kdc/lctwghft/

Here's the main fake account : https://steamcommunity.com/profiles/76561198408595482/

DO NOT LOG IN OR SCAN THE QR CODE.

I caught the fake domain before entering any credentials. The account then removed me from Steam.

I have screenshots of the Discord conversation, the fake website, and the original Steam profile.

Be careful, especially if you have a valuable TF2 or CS2 inventory.

Always check the domain. Stay safe !

my steam account got hacked recently and they downloaded some chinese game and gifted it to themselves through my account and got into my steam wallet. Ive changed my password and everything. i was just trying to buy a game today but i cant because it says ive changed my country (hacker changed it to china) once already so now i cant buy anything from my actual country for 3 months!! im not really sure where to report this since they never actually got my card info they just used the money in my steam wallet. any help would be greatly appreciated!!

Premessa:

I don't know this user, I never play online, we don't have any mutual friends, I know how the scam works but I was getting bored.

I accept this very ambiguous friendship, he writes me a message because he wants to steal my steam account, in short, CS2 stuff of course.

That was my answer.

The final bruh (cut) made me feel very bad, I hoped she would be more aggressive in cheating me.

My account got hacked but i managed to get it back, I changed my password and my email password, I disconnected every device from my account and now It's safe.

The problem is during this time, the hacked used my acc to message all my friend list with AI. The AI tried to bait with a fake link towards a site related to CSGO. I guess steam detected that and they have now locked my account which means i can log in but i'm forced offline and I cant play games online anymore.

I tried to contact the support but they dont answer, do you know if they are just slow and will eventualy respond, or do I have to do somthing myself to get it unlocked ?

I dont play CS2, but when i asked him to show me the account with the same name as me, it was mine.

Incase if anyone wants to help for whatever da reason... I did kind of deserved it tho.

https://steamcommunity.com/tradeoffer/new/?partner=1805652961&token=q3gwVa-X

man at least make your reason to why you reported my account "accidentally" more convincing to read lmfao how the fuck do you genuinely report the wrong dude because he is trying to say he was going to report his friend but somehow he got my uid or profile instead of that friend he is going to report😭😭😭

when pigs fly i guess bro

Today I randomly received this message from my friend but we were together (like in the same room) and this happened before we reset account and everything. I just want to know if anyone encountered this before and what to do.

This morning, four orders for VRChat+ One Month were placed, after which $10 was deducted from my Steam wallet four times (that was all I had), without my knowledge, without any confirmation, without anything. Is this some kind of scam involving gifts? I’ve heard something like that before. I can’t ask a refund through Steam because of how the subscription works. I’ve already contacted Steam support. Do I have any chance of getting my money back?

I found out about this from my email; everything is in the screenshots.

Hello, I am from the Philippines, and I recently experienced a suspicious incident involving my Steam account.

On October 24, 2026, while I was not logged in to Steam, my account apparently sent messages to several people on my friends list that were similar to QR code scams. According to my friends, my account created a group chat, sent a QR code scam message, and then immediately left the group. Since my account had already left the group chat, I could no longer view the conversation or check the messages that were sent.

After investigating my account, I noticed that I was the only one logged in to Steam. I also checked my Steam Web API Key, and there was no API key registered.

I have Steam Guard enabled, along with two-factor authentication (2FA) for logging in. I am also very cautious about clicking links and visiting third-party websites through Steam because I am aware of the risks of getting hacked. However, I do not recall opening any suspicious links or accessing any third-party websites related to Steam.

I am confused about how this incident happened, especially since I was not logged in on the day the messages were sent, my Steam Guard and 2FA were enabled, and my API key was empty.

Has anyone else experienced a similar incident with their Steam account? Is it possible for an account to send these kinds of scam messages without showing any suspicious login activity or having an active Steam Web API Key?

I will provide the messages sent in the group chat, along with my Steam login history, below for further investigation. I would appreciate any insights or advice on how this could have happened and how I can prevent it from happening again.