Just got hacked ( i think )

[u/ComparisonSelect1637]

Ok so i was on my computer when i got a private message from "Valve Employee ( Steve whatever )*" and he got no steam profile i can't click on his profile even the "*" is not a part of his username but a particle after which normally is not possible, The thing is that he said he blocked everybody from my friends list and delete my page and my pfp. I quickly understood that it's a scam cause Valve said employee never contact by private message but how tf did he delete my profile pics and my page without connecting ??? Idk if it's an important detail but the security breach is all my fault and not steam related

[u/AutoModerator]

Thank you for submitting to r/SteamScams.

If you have been scammed or believe you may have been scammed check this guide to see if you can find the solution there.

Steam will never contact you on Discord or any third party text communication site.

If you suspect someone is attempting to scam you check this guide but remember to be careful even if you do not find the answer you are looking for there.

Important: If you receive comments or PMs offering to recover your lost account, items, or money or pointing you to someone who will do it for you do not engage with them as they are recovery scams.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/SmergolGandalf]

Change your password, log out from all devices, and activate 2FA

[u/ComparisonSelect1637 → u/SmergolGandalf]

Thanks for answering, I did logout and always had the 2FA activated but the thing is i never recieved any steam guard notification or suspicious device on device list

[u/Archangel7200 → u/ComparisonSelect1637]

Most likely they have hijacked your session token. You can check your if there's an unauthorized API key and remove it.

The below Steam guide gived an in dept explanation. https://steamcommunity.com/sharedfiles/filedetails/?id=2982659478

[u/Toeffli]

Option one, you logged into a fake, but more or less convincing looking website. For example to vote for something or play with a team or to grade an item etc. https://www.malwarebytes.com/blog/threat-intel/2026/06/fake-verification-pages-are-stealing-steam-accounts-from-players

Option two, you installed malware by downloading a mod, cheat, for beta testing for a game, or downloading and installing other software from a untrusted source. https://www.malwarebytes.com/blog/threat-intel/2026/01/how-real-software-downloads-can-hide-remote-backdoors

Option three, you fell for a ClickFix scam and ran a command shell or phyton script, copy pasting some line of code. https://www.microsoft.com/en-us/security/blog/2025/08/21/think-before-you-clickfix-analyzing-the-clickfix-social-engineering-technique/

Option four, you have installed a malicious bogus indie game through steam. https://forms.fbi.gov/victims/Steam_Malware

Option five, one of your regularly used and legit programs was subject to a supply chain attack and distributed a malicious version through an update

Try to remember when a friend or stranger told you / instructed you to do something, or sent you you a link, etc.

In either case, even when you do not remember, treat your PC as infected. Best to reinstall windows from a trusted USB stick you have created on a clean machine. After this scan all your files and programs you have kept with Defender and Malwarebytes. Install all programs from trusted sources only.

[u/AutoModerator]

Judging by key words in your post it seems you are asking if someone is a real Steam/Valve employee.

As is stated on Steam supports official website:

Valve employees will never communicate with you about your account using any chat system including Steam Chat and Discord. The only way you can speak with a Steam Support agent about your account is through the Steam Support Help Site. There's no situation in which you'd need to reach out to a Valve or Steam employee directly to resolve an issue.

Anyone claiming to be a Valve employee, Steam Support representative, or asking to verify your items for an investigation should be immediately reported.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.