1. There is no such thing as a "pending" ban or Steam admin. Anyone threatening your account is a scammer trying to scare you. Read more.

Invalid Report: 76561199085116273 - ([TF2] Team Fortress 2 Items)

Discussion in 'Archived Reports' started by L Ψ Kongroo, Dec 17, 2020.

Thread Status:
Not open for further replies.
  1. L Ψ Kongroo

    L Ψ Kongroo New User

    Messages:
    1
    Steam:
    STEAM_0:1:39913867
    Scam Report

    Report Type: [Other] Any other fraudulent behavior
    Virtual item type involved: [TF2] Team Fortress 2 Items

    Accused profile: 76561199085116273

    Victim profile: 76561198040093463

    What happened? Description:
    On December 13th, around 2 PM, I received a message on Steam from a close, personal friend I talk to usually through Discord. They asked me to vote for a friend as they compete in an Intel-sponsored tournament. It was a phishing scam, and my buddy's account had fallen victim to it without his knowledge. The url I was given was this: https://intelproseason.com/?r=tryhardteam

    About 30 minutes later, my steam profile's name was changed to my account number, my PfP was changed to the generic question mark, and a different friend (allegedly a friend from college but presumably the phisher. The account has changed almost overnight from the profile I recognize to what it is now: https://steamcommunity.com/id/topstopov1). They told me that they notice something weird going on in my account and from what they saw, that I needed to act within an hour before VALVe banned my account.

    I didn't believe the story, but I was concerned enough to contact my cousin. I asked him to hold my items for now while I figured out what was going on and contacted Steam/VALVe for what was going on. However, our trades never went through: the phisher had access to my account and was rejecting the trades I was making with my cousin as fast as I was making them.

    Eventually, one of the trades went through...to the phisher. I had the mobile app so they could not perform the trade without tricking me, but I saw the cousin's Profile picture and screen name and felt secure. My items were sent to this account, on December 13th at 3:15 PM: https://steamcommunity.com/profiles/76561199046700393
    https://cdn.discordapp.com/attachments/388369155490971669/789009186117124096/unknown.png

    When my cousin reported that he didn't have any of my things, I panicked further in confusion. I eventually figured out what had happened, but it was already too late. I filled out a Steam Support ticket, and received responses over the next two days to the effect of: "That sucks. Here's what you can do to protect yourself in the future."

    I was bummed, but I kind of accepted the $900 mistake and was ready to move on. Until, around 7 PM, on December 16th. I received a message on Discord from a person I didn't know. https://media.discordapp.net/attach...30415173642/unknown.png?width=1201&height=676

    The claim and report are almost identical to what I received in Steam on the 13th (which is important, as the account that was communicated with to me has blocked me and I am unable to access those messages now, four days later). I reported the account on the only server that we seemed to have in common. But the prompt gave me an idea: could I follow the trail of my items to where they went after that account?

    Why, yes I can! ...almost. While the item history exists, I don't have premium features on backpack.tf. So I asked a friend who did.

    I decided to follow the easiest to identify item I could think of: my Level 66 Unusual Napper's Respite with Ghosts, painted Lime, and given a custom name and description evocative of TeamFourStar's Ghost Nappa. I found it almost immediately. According to my friend, the chain of inheritance is thus:

    https://steamcommunity.com/profiles/76561199046700393 (The account that was used to impersonate my cousin)
    https://backpack.tf/u/76561199085116273 ("Erick | Quicksell.store")
    https://backpack.tf/u/76561198091502579 ("Erick")
    https://backpack.tf/u/76561198216402911 ("Marketplace.TF | Bot #256")


    I can be contacted on Steam and Discord (Ghost Nappa #9744) at most hours of the day if further information is required on my part.​

    Provide Evidence:
    The identification of the accused does not come from any interaction with them; but the path of the item history of a single item. I had a very customized and easy to follow Level 66 Lime Napper's Respite with Ghosts, and following its trajectory. The account I am accusing is the first account it was moved to after the trade.

    My friend was also a victim of the phishing attack, and considering that my account was used to send similar messages to others in almost the same terms that I was contacted (on top of the fact that the item I tracked isn't in his profile, nor is he involved with TF2 to be interested in items) I am not accusing him. I am essentially following the paper trail.​

    Attached Files:

  2. Horse

    Horse Administrator SteamRep Admin

    Messages:
    72,755
    SteamRep Admin:
    STEAM_0:1:34690691
    Unfortunately, SteamRep does not accept reports dealing with hijacking/phishing/hacking -Due to current Investigative Policy
    http://forums.steamrep.com/threads/investigative-policy.140101/

    This includes anything to do with API key requests, wrong or misspelled URL's and sites requesting logins of any type in attempts to steal your credentials.
    These are phishing/hijacking attempts and are not to be reported to SteamRep!

    You can report the user to Valve instead
    In order to do that, you have to:
    1. Visit the accuseds profile
    2. Click MORE drop-down located at the top right of the page
    3. Choose REPORT VIOLATION
    4. Select the violation, then describe it and provide the evidence
    5. Click SUBMIT REPORT

    Click here to view an animated gif that shows how to report a violation.
Thread Status:
Not open for further replies.