1. SteamRep is shutting down at the end of 2024. See announcement.

Invalid Report: 76561198112803954 - (liksofa / [TF2] Team Fortress 2 Items)

Discussion in 'Archived Reports' started by Fastshot, Dec 26, 2013.

  1. Fastshot

    Fastshot New User

    Messages:
    2
    Steam:
    STEAM_0:1:34373885
    Scam Report

    Report Type: NOT SUPPORTED NOW - Phishing
    Virtual item type involved: [TF2] Team Fortress 2 Items

    Accused profile: 76561198112803954 (liksofa)

    Victim profile: 76561198029013499

    What happened? Description:
    This all began when I put up a trade on TF2outpost for a new unusual Barnstormer I had unboxed (Dead Presidents is the effect by the way). Someone posted saying that they were interested and left a url for me to add their "main account". I searched for the account on Steam but couldn't find it; I then tried the url to view the accounts inventory but was required to login. It was late at night and I didn't realize that I was putting in verification information to a "streamcommunity.com" page instead of a "steamcommunity.com" page. My account was then hijacked and the scammer took a s. gl, s. f. gl, s. shotgun, and 2 unusuals; a Vivid Plasma Glengarry Bonnet and my Dead Presidents Barnstormer.

    I was contacted by another person who fell victim to the same phishing scam; http://steamcommunity.com/profiles/76561198078524911/. Together we were able to track down where our items went and who might possibly be behind all of it.

    After I gained access back into my Steam account I looked into my inventory history to see where my items had gone; an account with the name suslick.i (http://backpack.tf/id/76561198112808069?time=1387612800, http://steamcommunity.com/profiles/76561198112808069/) had taken my items. This user has been banned on backpack.tf.
    My Glengarry Bonnet was not in that account however, it was moved to a different account: ShaMan (http://steamcommunity.com/profiles/76561198042584325). This person has already posted a trade on TF2outpost for my unusual: http://www.tf2outpost.com/user/76561198042584325

    The rest of my items went to liksofa's account and remained there until sometime on Dec. 23. After that, my items were moved again.​

    Provide Evidence:
    View attachment 40595 This shows the account that sent the phishing link: it says "streamcommunity.com".
    View attachment 40594 This shows what items suslick.i took out of my account.
    View attachment 40596 View attachment 40597 These show that four out of five items were moved into suslick.i's account.
    View attachment 40598 View attachment 40599 View attachment 40600 These show that suslick.i traded my items to liksofa.
    View attachment 40601 View attachment 40602 View attachment 40603 This is the account that suslick.i traded my unusual bonnet to.​

    Attached Files:

  2. Fastshot

    Fastshot New User

    Messages:
    2
    Steam:
    STEAM_0:1:34373885
    I realize I made a mistake in the evidence section; I did not link my screen shots correctly. I will say what goes where in this comment.

    outpost.png shows the account that sent the phishing link: it says "streamcommunity.com".

    inventory history.png shows what items suslick.i took out of my account.

    items in alt account 1.png and items in alt account 2.png show that four out of five items were moved into suslick.i's account.

    items moved to second alt account.png, second alt account containing my items.png, bp.tf liksofa with my items.png, all show suslick.i traded my items to liksofa.

    And the last three screen shots show the account that has my bonnet, the history of my bonnet showing that suslick.i traded it away from my account into ShaMan's, and the TF2outpost trade shows the history of my unusual again.

    If I need to refill out this report I will so the screenshots work; else I hope this is sufficient.
  3. Darksoul

    Darksoul New User

    Messages:
    180
    Steam:
    STEAM_0:0:41878305
  4. Clive

    Clive SteamRep Admin

    Messages:
    6,572
    SteamRep Admin:
    STEAM_0:0:43668349
    Please read the link provided above.

    Marking as Invalid.