Invalid Report: 76561198328007937 - ([Steam] Trading Cards)

Scam Report

Report Type: [Other] Any other fraudulent behavior
Virtual item type involved: [Steam] Trading Cards

Accused profile: 76561198328007937

Victim profile: 76561198026026048

What happened? Description:

Bought a website from a Fedzero dev from /r/SteamBotMarket, he tried to scam my trade bot pretending its not him​

Provide Evidence:

Hello.

I wanted to report a scam from developer Fedzero, his Steam: http://steamcommunity.com/profiles/76561198328007937, his reddit: https://www.reddit.com/user/Fedzero

I wanted to start a card sets site. I noticed Fedzero's thread https://www.reddit.com/r/SteamBotMa...rd_sets_website_1250/?st=j2vyb3ug&sh=6fc924d2 and contacted him via Steam. Unvortunetaly, Steam chat history was erased, but I will provide discord messages below. We discussed options and what addictional things he will do on site before giving code to me. On 25th of April we discussed price and he said it will be 1750 $ for his work, via Bitcoin (tier 3 in his tread). I agreed, asked if we can do it 50/50 (50% at first and 50% after work is done), he said that wants all in one payment. I sent Bitcoin, it was about 1770 $ with comissions at that time (transaction: https://blockchain.info/tx/9632d6d9df8a00683c65c4275a63fd926cd8f21c416ec45a0b201966410c16d1).

He recieved money, said that he starts to work. He also asked for my bot info (like username, pass, sharedsecret), so that he can check that system works. I said that I can't give my main (https://steamcommunity.com/id/nudzhbot) bot info, but I can give backup bot info, cause I didn't want my main bot to stop working. I sent him info via email: View attachment 561698 . He recieved it and started working.

In a week, on 3rd of May he said that he completed Buying feature and still needs time to complete main Selling feature. I said okay and gave him more time. I've been checking him in every couple of days, and on 11th of May he said he was pretty much ready with site and we need a server running Ubunutu 14.04 to start it. I took one of my servers and gave him info to start thing up. At that time I asked him to go to chat in Discord. First messages: View attachment 561699 View attachment 561700 View attachment 561701

He asked about propetries of server, disk space and such. I gave him server info here and started waiting for him to install server: View attachment 561702 . It took him lots of time to do: View attachment 561706 . He said he would take care of it: View attachment 561707 . I asked him for a source code to start working on front end: View attachment 561708 .

So finally he starts to install server and asks for my main account info which i send him: View attachment 561709 . In a day I ask how thing going and if account worked fine. He said more coding needed, since bot has many items in inventory: View attachment 561710

On 19th of May, I connected to server where my main bot runs and I see error in console which says InvalidPassword. I was shocked, tried to restart nodejs file where bot runs, still that error. I open browser, try to log in to account, it says that password is incorrect. I head to my email, where I see just this letter: View attachment 561712 . My account info was changed and ip address from which changes were made is in Italy ( View attachment 561713 ). To be clear, Fedzero is from Italy as well. What is interesting is that no other messages were received, such as about trying to reset email password and such.

I tried to get acccess to my account through resetting password, but Steam said that 2fa auth codes were wrong, so hacker changed phone number as well. I clicked that I don't have acccess to 2fa auth, Steam said that it would send code to an email, which was different from my account email. New email was f.***@gmail.com (somthing like that). I clicked that I don't have access to that email and self-locked my account (as it was at that time) Steam support has returned it and now its waiting to unlock, because steam guard was reset: https://steamcommunity.com/id/nudzhbot.

I was shocked and couldn't think it was Fedzero, so I wrote him about that: View attachment 561714 . To be sincere, it was the fastest time he replied to me (in about 2 mins) and started asking questions. I said that I self locked account and wrote to support. I started to think about whole thing and asked if he had gave info to anyone. He said that it was a crawler, but I never installed anything on server other from browser and nodejs and only used Steam site on it. I said that ip was italian. He said to give it to him, but I won't do it: View attachment 561715

As a result, I strongly believe its Fedzero who hacked my account, since he was the only one who had my bot info and could log in using 2fa auth code. I really hoped that I could work okay with that guy, but seems I was wrong.

In addition, I want to add something about site.

Fedzero sent me source code of a website. After he tried to scam my bot account I asked a friend dev to review the code. He reviewed it and found these lines of code: View attachment 561716 . Namely, it checks if offer is sent from accounts with these ids: http://steamcommunity.com/profiles/76561198117880841 (http://steamcommunity.com/id/trayfan) and http://steamcommunity.com/profiles/76561198328007937 (http://steamcommunity.com/id/fedzero), it will be auto-accepted by the bot.

I asked Fedzero about it and why he didn't tell about it: http://i.imgur.com/kO2y01L.png (sorry for imgur, I reached a limit of 15 screenshot). Tells that was his other client. Honestly I don't believe that. In addition, on screenshot 9 ( View attachment 561709 ) you can see that I ask how can I insert another bot in system, Fedzero replies "it's a bit complicated actually", but in fact that info is stored in same bot.js file (where Fedzero hided "admins").

I also found some more evidence connecting these two Fedzero and Trayfan. I will post more below.

Thank you​

I tried to start a site Fedzero gave me. To be said, none corrections we were talking about were made. In a footer of a site I found a link to steamsets.com, which seems to be a site Fedzero was selling: . You can even see same steamsets.com footer on his own gif image in his thread on reddit under Level Up Page link. What is more, if we open About page on steamsets.com we will see recent activity, and, surpise-surprise we see both Fedzero and Eye (or trayfan) there: .

All in all, I strongly believe I was scammed by these two people. Directly by Fedzero, by taking my money for website and trying to steal my bot and inderectly by Eye (or trayfan), who was on a list of "admins" who had permission to conduct any trades with site and bot (screenshot 15).