Scam Report Report Type: [Other] Any other fraudulent behavior Virtual item type involved: [TF2] Team Fortress 2 Items Accused profile: 76561199085116273 Victim profile: 76561198040093463 What happened? Description: On December 13th, around 2 PM, I received a message on Steam from a close, personal friend I talk to usually through Discord. They asked me to vote for a friend as they compete in an Intel-sponsored tournament. It was a phishing scam, and my buddy's account had fallen victim to it without his knowledge. The url I was given was this: https://intelproseason.com/?r=tryhardteam About 30 minutes later, my steam profile's name was changed to my account number, my PfP was changed to the generic question mark, and a different friend (allegedly a friend from college but presumably the phisher. The account has changed almost overnight from the profile I recognize to what it is now: https://steamcommunity.com/id/topstopov1). They told me that they notice something weird going on in my account and from what they saw, that I needed to act within an hour before VALVe banned my account. I didn't believe the story, but I was concerned enough to contact my cousin. I asked him to hold my items for now while I figured out what was going on and contacted Steam/VALVe for what was going on. However, our trades never went through: the phisher had access to my account and was rejecting the trades I was making with my cousin as fast as I was making them. Eventually, one of the trades went through...to the phisher. I had the mobile app so they could not perform the trade without tricking me, but I saw the cousin's Profile picture and screen name and felt secure. My items were sent to this account, on December 13th at 3:15 PM: https://steamcommunity.com/profiles/76561199046700393 https://cdn.discordapp.com/attachments/388369155490971669/789009186117124096/unknown.png When my cousin reported that he didn't have any of my things, I panicked further in confusion. I eventually figured out what had happened, but it was already too late. I filled out a Steam Support ticket, and received responses over the next two days to the effect of: "That sucks. Here's what you can do to protect yourself in the future." I was bummed, but I kind of accepted the $900 mistake and was ready to move on. Until, around 7 PM, on December 16th. I received a message on Discord from a person I didn't know. https://media.discordapp.net/attach...30415173642/unknown.png?width=1201&height=676 The claim and report are almost identical to what I received in Steam on the 13th (which is important, as the account that was communicated with to me has blocked me and I am unable to access those messages now, four days later). I reported the account on the only server that we seemed to have in common. But the prompt gave me an idea: could I follow the trail of my items to where they went after that account? Why, yes I can! ...almost. While the item history exists, I don't have premium features on backpack.tf. So I asked a friend who did. I decided to follow the easiest to identify item I could think of: my Level 66 Unusual Napper's Respite with Ghosts, painted Lime, and given a custom name and description evocative of TeamFourStar's Ghost Nappa. I found it almost immediately. According to my friend, the chain of inheritance is thus: https://steamcommunity.com/profiles/76561199046700393 (The account that was used to impersonate my cousin) https://backpack.tf/u/76561199085116273 ("Erick | Quicksell.store") https://backpack.tf/u/76561198091502579 ("Erick") https://backpack.tf/u/76561198216402911 ("Marketplace.TF | Bot #256") I can be contacted on Steam and Discord (Ghost Nappa #9744) at most hours of the day if further information is required on my part. Provide Evidence: The identification of the accused does not come from any interaction with them; but the path of the item history of a single item. I had a very customized and easy to follow Level 66 Lime Napper's Respite with Ghosts, and following its trajectory. The account I am accusing is the first account it was moved to after the trade. My friend was also a victim of the phishing attack, and considering that my account was used to send similar messages to others in almost the same terms that I was contacted (on top of the fact that the item I tracked isn't in his profile, nor is he involved with TF2 to be interested in items) I am not accusing him. I am essentially following the paper trail.