MyriadGame Posted June 13, 2019 Share Posted June 13, 2019 So I was just selling an unusual taunt to a buy order via backpack.tf, and this guy who i sent it too added me saying he was “unable to check my offer at the moment” He then asked me to check my item’s index or something on this fishy site i’ve never seen called tf2detail.com. When i tried entering, it said “error 502 bad gateway”, and j told the guy about it. He said that it must not be avaliable in my country. He then asked if my items could be “deposited” in marketplace.tf, as he had to check if they could be in a pending trade offer. I had heard several scams regarding depositing items before, so i didn’t go to marketplace. I did show him a screenshot of an earlier pending trade to a bot which (for some reason) hadn’t accepted it yet, (which is why i went to this guy in the first place), and he said that it had to be a person, not a bot. After I told him i wasn’t gonna try depositing on marketplace, he asked me to check if i could deposit on scrap.tf. I have since unfriended him, did I falsely think some innocent trader was scamming or did I just prevent a scam? Link to comment Share on other sites More sharing options...
Diamond jozu Posted June 13, 2019 Share Posted June 13, 2019 it was a scam.im glad you knew some knowledge about the scam.you should check on youtube and guides about all sorts of scam that can occur on steam. HOWEVER,you are not done.you said you were trying to enter this 'tf2detail' site.first of all,that site isnt legit.its a scam. im not sure if you did log in or not but if you did,please check this now: https://help.steampowered.com/en/accountdata/GetFriendMessagesLog when you entered the site by logging it,you have given your account id and password to the owner, a.k.a. the scammer.he cant steal your items yet so DONT DO ANY TRADES AT ALL.you lock your account by following the guide in that link above. Link to comment Share on other sites More sharing options...
D.Alex Posted June 13, 2019 Share Posted June 13, 2019 After "logging in" to a phishing website your Steam account is indeed compromised but you don't have to "lock" it. Just change your Steam password and revoke Steam API Key as described here: https://forums.steamrep.com/pages/hijacking/https://marketplace.tf/blog/posts/YHLZOB Link to comment Share on other sites More sharing options...
Scott Bakula Posted June 14, 2019 Share Posted June 14, 2019 Yeah, as mentioned above, since you did get phished, you need to change your password and revoke your API key. What you managed to avoid was the second part of the scam. For that, what happens once they get your details from the phish, is that they are able to make and cancel trade offers with your account, however, they can't confirm it. What they then do the next time you make a trade, is immediately cancel it, then resend the offer to an impersonator account. You would then not notice it (especially if doing the trade on mobile), and click confirm, thus giving your items to the scammer instead of the intended account. Link to comment Share on other sites More sharing options...
MyriadGame Posted June 14, 2019 Author Share Posted June 14, 2019 11 hours ago, Diamond jozu said: it was a scam.im glad you knew some knowledge about the scam.you should check on youtube and guides about all sorts of scam that can occur on steam. HOWEVER,you are not done.you said you were trying to enter this 'tf2detail' site.first of all,that site isnt legit.its a scam. im not sure if you did log in or not but if you did,please check this now: https://help.steampowered.com/en/accountdata/GetFriendMessagesLog when you entered the site by logging it,you have given your account id and password to the owner, a.k.a. the scammer.he cant steal your items yet so DONT DO ANY TRADES AT ALL.you lock your account by following the guide in that link above. 11 hours ago, D.Alex said: After "logging in" to a phishing website your Steam account is indeed compromised but you don't have to "lock" it. Just change your Steam password and revoke Steam API Key as described here: https://forums.steamrep.com/pages/hijacking/https://marketplace.tf/blog/posts/YHLZOB 2 hours ago, Scott Bakula said: Yeah, as mentioned above, since you did get phished, you need to change your password and revoke your API key. What you managed to avoid was the second part of the scam. For that, what happens once they get your details from the phish, is that they are able to make and cancel trade offers with your account, however, they can't confirm it. What they then do the next time you make a trade, is immediately cancel it, then resend the offer to an impersonator account. You would then not notice it (especially if doing the trade on mobile), and click confirm, thus giving your items to the scammer instead of the intended account. Thx to everyone who replied, glad to know I avoided a scam. I have changed my password and revoked my API key, and tried trading with a bot and everything works fine. Thx for the help guys! Link to comment Share on other sites More sharing options...
DanielDee Posted June 14, 2019 Share Posted June 14, 2019 Looks like the mannco store owner has sold his site code to some nefarious people who are now using it to phish. hmmm. this is the 5th different site with the same style i have seen in just one week alone. Its also hosted with the same host and registar as mann co store aswell.. Link to comment Share on other sites More sharing options...
KhaoticKunt Posted June 18, 2019 Share Posted June 18, 2019 Hey guys, unfortunately my dumbass was T H I S close to falling victim to this scam, even to the point where he got access into my account but I changed all my passwords immediately. I do however have a really big concern, do you think that me logging into tf2detail . com has caused and spyware or malware to be downloaded to my computer? I know it sounds like a really really dumb question but im sort of concerned as to whether I can log back into my stuff on this computer anymore . obviously ive done scans im just a tad concerned aaaaaaaaaaaaaaaaa Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.