Archived 76561198020257384 (Raxshi)

Victim:
| steamname: Ras2
| steamID32: STEAM_0:0:20556173
| steamID64: http://steamcommunity.com/profiles/76561198001378074
| customURL: http://steamcommunity.com/id/ras2
| steamrep: http://steamrep.com/profiles/76561198001378074

Scammer:
| steamname: Raxshi
| steamID32: STEAM_0:0:29995828
| steamID64: http://steamcommunity.com/profiles/76561198020257384
| customURL: http://steamcommunity.com/id/Raxshi
| steamrep: http://steamrep.com/profiles/76561198020257384

Description:
My account was hijacked Thursday 11 July 2013 11:25 (UTC) by phishing link on TF2Outpost.

As i can see, the link was posted from other hijacked account.

I send a ticket to the Steam Support:


Soon after Steam Support restored my account:


3 days later (July 14) Steam Support restore stolen TF2 items (2 Unusual Hats, Keys, etc.)


Now i can see that both my unusual hats appeared in this person (http://steamcommunity.com/profiles/76561198020257384) inventory the same time when my account was hijacked.
Items history:


http://backpack.tf/item/1719984621
http://backpack.tf/item/1662408961

Raxshi backpack changes with timestamp (Saved on Thu, 11 Jul 13 07:04:57 -0500):
http://www.tf2items.com/id/Raxshi?time=1373544297

Now he is trying to sell them at TF2Outpost for low price:
http://www.tf2outpost.com/trade/12683076

I need screenshots of your actual inventory history showing where the items went. Thanks!

HelenAngel, here is mine and Raxshi backpack snapshots:

Ras2:
http://backpack.tf/id/76561198001378074?time=1373439600 (2013-07-10 there is no "Hat with no name" in my inventory, because I set it to Steam Communuity Market earlier, but later that day I took it back)
http://backpack.tf/id/76561198001378074?time=1373526000 (2013-07-11 account already hijacked)
Note how the item graph is crashing at Jule 11 - the day that my account was hijacked.

Raxshi:
http://backpack.tf/id/76561198020257384?time=1373439600 (2013-07-10 all clear)
http://backpack.tf/id/76561198020257384?time=1373526000 (2013-07-11 he got my hats)

As you can see, now these items are duplicated. Hats become duplicated when Steam Support restored my backpack - July 14. Now they exists both in my backpack and Raxshi backpack.

Here again items history:
http://backpack.tf/item/1719984621
http://backpack.tf/item/1662408961

Note that there is no other owners after me except Raxshi. So when my account was hijacked, this hats were immediately transfered into Raxshi backpack.

Here proof that i get this hats legal way:

What she meant by inventory history was to go into your inventory, click view inventory history (or click here), and take a snapshot of the trade. Make sure it's uncropped and remember to upload it directly to Steamrep. Thanks

Sari, thank you for clarification English is not my native language and i didn't know about that feature in Steam.
Anyway, here is screenshot:

Now I can see, that he did it thru some mediator account.

Wow. How interesting. I'll make a bigger post in a moment, I'm kind of shocked to see a scam report on me. Fingers shaking. Please give me 5 minutes and refresh.

Okay so, the story is, I had a quicksell trade up. I was buying ANY unusual for 50-80% off, some Russian person contacted me and sold me your unusuals. He was NOT marked, there was not a scam report made on him. What proof do I need to provide?

Ok then. Please, provide steam inventory history screenshots. I want to see that you bought my hats for something valuable, not 10 keys or something like. And post Steam id of that person here.

Provide an uncropped version of your trading please.

If this is directed to me, I can do it.

| steamname: |UKMD|Celreo
| steamID32: STEAM_0:1:32722996
| steamID64: http://steamcommunity.com/profiles/76561198025711721
| customURL: http://steamcommunity.com/id/celreo
| steamrep: http://steamrep.com/profiles/76561198025711721


Raxshi's trade history http://i.imgur.com/qUxQcjl.png

Checked UKMD Forums on a suspicion that Celreo was hijacked - he was
http://www.ukmandown.co.uk/e107_plugins/forum/forum_viewtopic.php?317616.post

| steamname: S> MY bp
| steamID32: STEAM_0:1:56702642
| steamID64: http://steamcommunity.com/profiles/76561198073671013
| customURL:
| steamrep: http://steamrep.com/profiles/76561198073671013

Based on the evidence I was able to gather, I'm certain that Celreo was hijacked at the time. Given that Celreo wasn't tagged or reported, Raxshi did nothing wrong.