Suppose that, out of the blue, a Steam user tells y'all they've accidentally reported you for something you lot didn't exercise, similar making an illegal purchase, and that your Steam account is going to be suspended.

They ask you to message a Steam admin, whose profile they kindly provide, to assistance you sort out this dilemma.

What practise you practise?

There are some scams on Steam which take stood the test of time. Their tactics and target accept remained more often than not consistent for years. Phishing campaigns aimed at harvesting as many user credentials as possible, for example, are a dime a dozen. And let's not forget the many ways a fraudster can dupe Counter Strike: Global Offense (CS:Become) players.

Like Steam phishing campaigns, this particular Steam scam—referred to loosely every bit the "I accidentally reported you" or "I accidentally reported your account" scam—has been coming and going since initial reports of it emerged in late 2018. To date, it has no other target apart from Steam users. And, based on its new latest iteration, it targets Steam users with a Discord account.

For those who aren't aware of this scam and its variants, below is a breakdown of how the scam works. On the other hand, if you lot're quite acquainted with it, dearest Reader, then feel gratis to skip to the side by side section.

The Steam scam playthrough

The how-do-you-do

The fraudsters behind the "I accidentally reported yous" scam usually approach their targets under the pretext that they need something, or they have something to say. Anything to suggest that information technology's something important and that they should exist heard out.

They may already exist a Steam "friend", from a couple of days or years ago, someone in the aforementioned Steam group as you lot, or a user who wants y'all to add them to your friends list.

These scammers are straightforward but polite, usually greeting yous first earlier asking if you're decorated so as non to intrude. They are fifty-fifty assuredly apologetic. (Paradigm via Reddit user /u/Moritz_M05.

I'one thousand then sorry only I accidentally reported your account to the steam admin for scamming me and duping items instead of someone who impersonated your profile and that impersonator is a scammer who scammed me 🙁

At that place is no word-for-give-and-take script that scammers stick to, just the gist is this: someone posing as yous scammed them, only they reported you lot instead of the impostor.

Note that other variants of this scam will claim that they have reported y'all for "doing illegal purchases"—another reason to cause a degree of alarm just flawed, nonetheless.

The help

(Via /u/Moritz_M05)

I'm worried about your account at present bro considering the steam admin already ban his account

(Via /u/Moritz_M05)

if my report on your account gets process you will get ban too just like the scammers account 🙁

At this point, the scammer drives the point that your account will get banned next, unless something is washed. The scammer and then insinuates that help is on the manner: a "Steam admin" that will abolish the report and remove the target'southward business relationship from the ban pile. However, they should ostend that the report against them was a mistake first.

(Via /u/Moritz_M05)

ok so here is the profile of the steam admin if he accept just file a ticket to him that y'all are non involved in the written report

The sharing of a legitimate contour—or what appears to exist legitimate—that is connected to Steam or its developer, Valve, is one of the tactics scammers employ to make their claims look more truthful.

If you raise the possibility that this Steam admin might not have your friend request, the scammer suggests that y'all contact them via Discord.

(Via /u/Moritz_M05)

can you add him on discord? then that if he cannot discover your req on steam maybe he will find it on discord.

anyway I need to show yous something

Oh no, what now?

this is a reply about my report on your account

The scammer shows a purported response from "Jill", the Steam admin of this case, containing explicit instructions to contact the political party who was mistakenly blocked and have them contact her as well through Discord. She even left her Discord user name. (Via /u/Moritz_M05)

It's another reinforcement tactic, to erase any doubts y'all may still have. Frankly, information technology's overkill at this point.

The hogwash

Convinced of what yous must practice and who you need to contact, you arrive touch with the Steam admin. Of course, this admin is fake and probable either the scammer or an accomplice.

Note that the tone of the conversation changes here. The scammer's concerned and helpful front end is gone one time you start chatting with the simulated admin:

How-do-you-do there, Please state the reason why did you lot add me?

Afterward you briefly explicate the situation, the fake admin asks for a screenshot of the chat that transpired betwixt you and the scammer.

I received the report according to our coordinator'southward review near illegal activity for Illegal Purchased just you don't have to worry here if yous're not really involved in the said issue. I will remove the banned report issue in your business relationship. All you need to do is to prove that your business relationship is in adept condition and information technology was a faux accusation so that Valve Report Assistance Team will cancel the Banned report charge on your account

The proof they inquire for is a screenshot of your purchase history. They volition likewise ask you to log out of your Steam account on your computer and/or mobile so they tin can "start the scanning of your business relationship status". Of course, there is no scan. The fake admin asks this as a lead in to asking for more data—for starters, the email address tied to your Steam account.

An email accost is needed when a Steam user finds themselves locked out of their account and they forgot their business relationship name or password.

The false admin asks you to get the verification code sent by Steam to your email address. If yous happen to have Steam Guard enabled, the fake admin will ask for the code as well.

Never requite anybody your Steam Guard password.

In some cases, the faux admin will ask you to ship them the reported duplicate item to bank check if it was, indeed, a indistinguishable via the Steam trading part. This is framed equally "borrowing" the item, but you lot won't be getting it dorsum.

If you lot comply with the faux Steam admin you can lose your accounts, your game items, and even money.

Targets who question any of the tasks the fake admin asks them to practise are met with the pressure to respond chop-chop because they're "running out of time", they are presented with a fake certificate, or they are threatened with having their accounts deleted.

Fake Steam admin not giving yous whatsoever selection just to comply, or else. (Via /u/GatoTristeY)
I know, correct? (Paradigm taken from a hijacked Steam profile)

Although several Steam users will not reach this part of the scam, many aren't and then lucky. Some, despite knowing that something is off, aren't 100 percent sure if they're dealing with a scammer or not.

Truthful social engineers, or only desperate?

What we believed to be the first variant of this scam in 2018 was unproblematic and solely focused on misusing the Steam trading function. This scam is now highly evolved and, one can say, has branched out into other nefarious acts, such as hijacking accounts, rare item theft, and other ways scammers can milk victims of their (or their parents') hard-earned money.

Like near scams, the "I accidentally reported you" scam relies heavily on social engineering tactics that aim at gaps in a Steam user's familiarity with how things work within the platform'due south ecosystem.

Scammers want to appear believable, so it's no surprise they apply already hijacked accounts that have a good standing on Steam when reaching out to targets. The same can exist said about Discord accounts nether their control.

Scammers refurbish accounts to make it look like a Valve employee by customizing its URL and providing more background info. If this doesn't scream "I'chiliad a Valve employee!", so I don't know what does. (Via /u/CoffeeMapachi)

The scammers behind this scheme also come up prepared. Non only do they accept the materials—screenshots and a guide script—they need to counter frequent questions raised well-nigh their credibility, they are likewise not afraid to play on Steam users' fears, fifty-fifty at the hazard of losing the credibility they already built up with their target.

Familiarize and do

Steam has ever put the onus of not getting scammed onto the shoulders of its users. If you did become scammed, Steam Back up will assistance to the best of their abilities, including getting your hijacked account back. Merely beyond this, like retrieving a stolen rare item, refunding money if your account has been used to purchase Steam gift cards (for case), they probable won't be able to help.

That said, information technology's crucial for Steam users to realize that they may have blind spots and may non be equally well acquainted with some aspects of the platform as they call up. Filling in these blind spots can help you spot scams.

Know that:

  • There is no such thing equally "Steam admin", fake report, or a "Certificate of Eligibility".
  • There are Valve employees with Steam profiles. And they proudly display a legitimate badge to bear witness this. They are meridian-tier moderators (mods) who take full ambassador privilege in Steam.
  • Real Valve employees belong to ii invite-merely groups, which are Valve and Steam.
  • In that location are Steam Community Moderators. Similar Valve employees, current and retired moderators have their own badges, too. Community moderators tin ban users, amongst other things.
  • Real Steam Customs Moderators, both active and inactive, belong to the invite-only group, STEAM Community Moderators (SUFMods).
  • There is a folio where you can look upwards all Steam Community Moderators.
  • Scammers link back to legitimate profiles of Valve employees or Steam moderators to hook targets into reaching out to through Discord. These Discord accounts are not manned by Valve employees only by scammers.
  • In that location is no such matter every bit an illegal item. That said, in that location is no need for anyone to review an item.
  • If an item does need inspection, Valve employees would not require you to hand them over. They will just look it upward in their database.
  • Duplicate items (or dupes) exist, merely they are non illegal. Duplication was done years agone by Steam Support to restore scammed or stolen items for hijacked victims. Steam Support doesn't practice this anymore.
  • If y'all have handed over an detail to someone claiming to be a "Steam admin", consider it gone forever. The current policy is that Steam Support does not restore items that have left an business relationship, including scammed ones.
  • If there is a problem with your account, or you take an impending ban, Steam will allow you know either via email, a Support ticket, or account alerts. Hither is an instance [link to account-warning-sample] (taken from Steam on Reddit).
  • A Steam moderator will never contact you via chat or a tertiary-party app like Discord for any reason.
  • A Steam moderator will never mediate between yous and another user.

Secure your Steam business relationship by using a potent password, taking full reward of Steam Guard—Steam'southward two-cistron hallmark method—and be aware of the latest scams that are targeting yous as a Steam user. Go along the above points in mind, and stay safe!