Suppose that, out of the blue, a Steam user tells you they've accidentally reported yous for something y'all didn't do, like making an illegal purchase, and that your Steam account is going to be suspended.

They enquire you to message a Steam admin, whose profile they kindly provide, to help you lot sort out this dilemma.

What do you do?

There are some scams on Steam which accept stood the test of time. Their tactics and target have remained generally consistent for years. Phishing campaigns aimed at harvesting as many user credentials every bit possible, for case, are a dime a dozen. And let's not forget the many ways a fraudster can dupe Counter Strike: Global Criminal offence (CS:Go) players.

Like Steam phishing campaigns, this particular Steam scam—referred to loosely as the "I accidentally reported you" or "I accidentally reported your account" scam—has been coming and going since initial reports of it emerged in late 2018. To date, it has no other target apart from Steam users. And, based on its new latest iteration, it targets Steam users with a Discord business relationship.

For those who aren't enlightened of this scam and its variants, below is a breakdown of how the scam works. On the other hand, if you're quite acquainted with information technology, dear Reader, then feel free to skip to the next section.

The Steam scam playthrough

The hello

The fraudsters behind the "I accidentally reported you" scam unremarkably approach their targets under the pretext that they need something, or they accept something to say. Annihilation to advise that it's something important and that they should be heard out.

They may already exist a Steam "friend", from a couple of days or years ago, someone in the aforementioned Steam grouping as you, or a user who wants you to add them to your friends listing.

These scammers are straightforward but polite, usually greeting you starting time before asking if you're busy so as not to intrude. They are even convincingly atoning. (Image via Reddit user /u/Moritz_M05.

I'm and then deplorable only I accidentally reported your business relationship to the steam admin for scamming me and duping items instead of someone who impersonated your profile and that impersonator is a scammer who scammed me 🙁

In that location is no give-and-take-for-word script that scammers stick to, but the gist is this: someone posing equally you lot scammed them, but they reported yous instead of the impostor.

Note that other variants of this scam volition merits that they have reported you for "doing illegal purchases"—some other reason to cause a degree of alarm only flawed, still.

The help

(Via /u/Moritz_M05)

I'm worried about your account now bro because the steam admin already ban his account

(Via /u/Moritz_M05)

if my study on your account gets procedure you will get ban likewise only like the scammers account 🙁

At this bespeak, the scammer drives the point that your business relationship volition get banned next, unless something is washed. The scammer and then insinuates that help is on the fashion: a "Steam admin" that will abolish the report and remove the target's business relationship from the ban pile. However, they should confirm that the report against them was a fault first.

(Via /u/Moritz_M05)

ok and then here is the profile of the steam admin if he take just file a ticket to him that you are not involved in the report

The sharing of a legitimate profile—or what appears to be legitimate—that is continued to Steam or its developer, Valve, is i of the tactics scammers employ to make their claims expect more truthful.

If you raise the possibility that this Steam admin might not accept your friend request, the scammer suggests that yous contact them via Discord.

(Via /u/Moritz_M05)

tin y'all add him on discord? and then that if he cannot notice your req on steam maybe he will notice information technology on discord.

anyway I need to testify you something

Oh no, what now?

this is a answer almost my report on your account

The scammer shows a purported response from "Jill", the Steam admin of this case, containing explicit instructions to contact the party who was mistakenly blocked and have them contact her also through Discord. She even left her Discord user name. (Via /u/Moritz_M05)

It'south some other reinforcement tactic, to erase any doubts you may even so have. Bluntly, it'due south overkill at this signal.

The hogwash

Convinced of what you must practice and who you need to contact, you go far touch with the Steam admin. Of course, this admin is fake and likely either the scammer or an accomplice.

Note that the tone of the chat changes hither. The scammer'south concerned and helpful front is gone once you offset chatting with the fake admin:

Hello there, Please land the reason why did you add me?

After you briefly explain the situation, the false admin asks for a screenshot of the chat that transpired between yous and the scammer.

I received the study according to our coordinator'due south review about illegal activity for Illegal Purchased but you don't have to worry hither if you're not really involved in the said consequence. I will remove the banned report issue in your account. All y'all need to practise is to prove that your account is in good condition and it was a imitation accusation so that Valve Report Assistance Team will cancel the Banned written report accuse on your account

The proof they inquire for is a screenshot of your purchase history. They will also ask you to log out of your Steam account on your estimator and/or mobile so they can "start the scanning of your business relationship status". Of class, there is no scan. The imitation admin asks this as a lead in to asking for more data—for starters, the email address tied to your Steam account.

An email address is needed when a Steam user finds themselves locked out of their account and they forgot their account proper name or password.

The fake admin asks you to get the verification lawmaking sent by Steam to your e-mail address. If you happen to accept Steam Baby-sit enabled, the false admin will ask for the code as well.

Never give anybody your Steam Guard password.

In some cases, the fake admin will enquire you lot to send them the reported duplicate item to check if it was, indeed, a duplicate via the Steam trading office. This is framed as "borrowing" the detail, but y'all won't exist getting it back.

If you comply with the fake Steam admin you tin lose your accounts, your game items, and fifty-fifty money.

Targets who question any of the tasks the imitation admin asks them to do are met with the pressure to respond quickly because they're "running out of time", they are presented with a fake certificate, or they are threatened with having their accounts deleted.

Fake Steam admin non giving you lot whatsoever choice merely to comply, or else. (Via /u/GatoTristeY)
I know, correct? (Prototype taken from a hijacked Steam contour)

Although several Steam users will not reach this part of the scam, many aren't and so lucky. Some, despite knowing that something is off, aren't 100 pct certain if they're dealing with a scammer or not.

True social engineers, or just desperate?

What we believed to be the kickoff variant of this scam in 2018 was uncomplicated and solely focused on misusing the Steam trading part. This scam is now highly evolved and, one can say, has branched out into other nefarious acts, such as hijacking accounts, rare detail theft, and other ways scammers can milk victims of their (or their parents') hard-earned coin.

Like most scams, the "I accidentally reported y'all" scam relies heavily on social engineering tactics that aim at gaps in a Steam user's familiarity with how things work within the platform's ecosystem.

Scammers want to appear believable, so it's no surprise they use already hijacked accounts that have a good standing on Steam when reaching out to targets. The same can be said about Discord accounts under their control.

Scammers refurbish accounts to make information technology wait like a Valve employee by customizing its URL and providing more background info. If this doesn't scream "I'grand a Valve employee!", and then I don't know what does. (Via /u/CoffeeMapachi)

The scammers backside this scheme as well come prepared. Not but practice they have the materials—screenshots and a guide script—they need to counter frequent questions raised about their credibility, they are too not afraid to play on Steam users' fears, even at the adventure of losing the credibility they already built up with their target.

Familiarize and do

Steam has always put the onus of not getting scammed onto the shoulders of its users. If you did go scammed, Steam Support will assist to the best of their abilities, including getting your hijacked account dorsum. But beyond this, like retrieving a stolen rare item, refunding money if your account has been used to purchase Steam gift cards (for instance), they likely won't be able to help.

That said, it's crucial for Steam users to realize that they may have blind spots and may not exist as well acquainted with some aspects of the platform every bit they think. Filling in these bullheaded spots tin assist you spot scams.

Know that:

  • There is no such affair equally "Steam admin", false study, or a "Certificate of Eligibility".
  • At that place are Valve employees with Steam profiles. And they proudly display a legitimate badge to prove this. They are peak-tier moderators (mods) who have total administrator privilege in Steam.
  • Real Valve employees belong to two invite-only groups, which are Valve and Steam.
  • There are Steam Community Moderators. Like Valve employees, current and retired moderators accept their ain badges, also. Customs moderators can ban users, among other things.
  • Existent Steam Community Moderators, both active and inactive, belong to the invite-only group, STEAM Community Moderators (SUFMods).
  • There is a page where you can await up all Steam Customs Moderators.
  • Scammers link dorsum to legitimate profiles of Valve employees or Steam moderators to hook targets into reaching out to through Discord. These Discord accounts are non manned by Valve employees only by scammers.
  • There is no such thing as an illegal particular. That said, there is no need for anyone to review an item.
  • If an item does need inspection, Valve employees would not require you lot to hand them over. They will but look it up in their database.
  • Duplicate items (or dupes) exist, merely they are not illegal. Duplication was done years ago by Steam Support to restore scammed or stolen items for hijacked victims. Steam Back up doesn't do this anymore.
  • If you accept handed over an particular to someone claiming to be a "Steam admin", consider it gone forever. The current policy is that Steam Support does not restore items that have left an account, including scammed ones.
  • If in that location is a trouble with your account, or you take an impending ban, Steam will permit you know either via electronic mail, a Support ticket, or account alerts. Here is an example [link to account-alert-sample] (taken from Steam on Reddit).
  • A Steam moderator will never contact you via chat or a tertiary-political party app similar Discord for whatever reason.
  • A Steam moderator will never mediate between you and another user.

Secure your Steam account past using a stiff password, taking full reward of Steam Guard—Steam's two-cistron authentication method—and be aware of the latest scams that are targeting you lot as a Steam user. Go on the in a higher place points in mind, and stay safe!