Sorry, no giveaways here. I'm unfamiliar with Steam forums so I figured I would ask SG. Apparently someone has attempted to get into my Steam account. I was sent an email from Steam Support with directions on how to reset my password, which I ignored as instructed. I know it wasn't accidentally me because the IP address Steam sent me is in Russia. The whole situation reminds me of Origin's ordeal and it's making me nervous because my account was compromised then.

  • Does this mean someone has my account name?

  • I have SteamGuard but are there other steps I can take to prevent this from happening?

  • Should I be worried at this point, or does this happen to lots of people?

Thanks to anyone who can shed some light on this.

Edit: I think I've done everything I can. Thanks for all the helpful responses! I hope this thread will be useful to other people feeling anxiety in similar situations.

Update: The first line of the email is: "Someone (hopefully you) has requested to reset your password at the Steam Support helpdesk." It seems the email is what gets sent when you enter a username/email into the "forgot my password" section for your Steam Support account. None of my passwords have been changed (by anyone other than me) and I haven't received any further uninitiated mail.

11 years ago*

Comment has been collapsed.

someone manage to get your password
i say you need to change it

11 years ago
Permalink

Comment has been collapsed.

You only get the email if they correctly enter your password?

11 years ago
Permalink

Comment has been collapsed.

Yes.

11 years ago
Permalink

Comment has been collapsed.

Are you sure? The e-mail he describes sounds like what you get when someone goes through the password recovery process. The other person would still need access to his e-mail to complete the reset.

11 years ago
Permalink

Comment has been collapsed.

Now that you mentioned it... I don't know.

11 years ago
Permalink

Comment has been collapsed.

Was it the email you get if someone entered a key that was activated on your account?

11 years ago
Permalink

Comment has been collapsed.

No, we discussed it and found out what happened below. Long story short, someone tried to reset his Steam Support account's password. It didn't work because e-mail confirmation is required.

11 years ago
Permalink

Comment has been collapsed.

  • I'm guessing yes.
  • Change your password.
  • Be worried.
11 years ago
Permalink

Comment has been collapsed.

I'm very sorry for you, and I think you have log-ined in a site like "steamcommnty", made by russians. This happened to my friend. Or maybe you downloaded a keylogger. You should change your password and write Steam Support a ticket maybe.

11 years ago
Permalink

Comment has been collapsed.

I still have access to my account. I haven't logged into any fake Steam websites though. My anti-virus and anti-malware programs didn't come up with anything. Thanks for the response.

11 years ago
Permalink

Comment has been collapsed.

Well, it may be something: I think you can get that email if someone presses "forgot your password". I think he needs your email or your Steam ID, i don't know.

11 years ago
Permalink

Comment has been collapsed.

just change ur pass, and stop worrying...

11 years ago
Permalink

Comment has been collapsed.

My concern is that they are attempting in the first place. My password is in no way easy to guess (long with various letters, numbers, case changes) and I don't think they have my password yet. I'm not sure how changing it would help.

11 years ago
Permalink

Comment has been collapsed.

Not changing it definitely wouldn't help, so maybe change it just as a precaution.

11 years ago
Permalink

Comment has been collapsed.

There are few options.

  1. You are against ivul hackur who wantz access to all your gamez.
  2. Someone made honest mistake in their username or something.
  3. You registered-and-forget years ago with the same username/mail on some site (probably game-oriented) which eventually leaked database and someone is trying to get lucky by praying on stupidity of users who uses same/supereasy passwords everywhere.
  4. You got scam message.
  5. Got a virus/keylogger.
  6. Someone knows your email or username (friend,family) and is goofing around.
11 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 2 years ago.

11 years ago
Permalink

Comment has been collapsed.

I did all of the above, thank you for your help!

11 years ago
Permalink

Comment has been collapsed.

Yes. You should be worried.

11 years ago
Permalink

Comment has been collapsed.

If they sent you directions to reset your password, wouldn't that mean they have your email rather than your password? It could be that someone wanted to reset their own password but typed the wrong email which happened to be yours. If you don't get any other reset password requests, don't worry about it. If you are still worried, change your email password. If you have steamguard enabled, your email is more important.

11 years ago
Permalink

Comment has been collapsed.

I haven't seen that kind of mail, it doesn't sound like the one you get if someone is trying to recover with just your email (I had one of those, still reported to Steam). So it sounds like they do have your account name... Which doesn't mean they "know" it, could still be an error or random.

11 years ago
Permalink

Comment has been collapsed.

Instructions for the paranoid:

Step #1: Run a malware scan on your system to make sure there are no keyloggers.
Step #2: Change your Steam password from within the Steam Client.
Step #3: Change your email password, just in case.
Step #4: If you haven't already, turn on Steam Guard account security. If it IS already turned on, and if you've ever logged in from a system other than the one that you're using right now, reset Steam Guard by deauthorizing all other computers. This way somebody will need BOTH your Steam and email passwords in order to hack your account.

NOTE: Make sure that you use different passwords for each site, and make sure that they're stored in a secure password management system such as KeePass (free) or RoboForm (not free).

11 years ago
Permalink

Comment has been collapsed.

11 years ago
Permalink

Comment has been collapsed.

Thank you! I'm doing this as we speak. When I changed my steam account password the email I got with a code to verify was different than the initial email. The first email only had my visible username (B521) while the other I was sent after I requested the change was my account name.

11 years ago
Permalink

Comment has been collapsed.

Glad to be of assistance.

(Then again, you're not paranoid if they really ARE out to get you.) ;)

11 years ago
Permalink

Comment has been collapsed.

have you activated a steam key from internet recently? if yes someone tried to redeem it and pressed the button for the lost password, so if is this don't worry.

11 years ago
Permalink

Comment has been collapsed.

I did make a purchase from GMG.

11 years ago
Permalink

Comment has been collapsed.

no, i meant a key that was shared on internet like if i put a key here.

11 years ago
Permalink

Comment has been collapsed.

Nope, but I have done those before.

11 years ago
Permalink

Comment has been collapsed.

Does the e-mail looks like this?


Dear you,

This is an automated message generated by Steam account administration to help you reset your Steam password.

Please enter the following code into the 'Verification Code' field of the 'Forgotten Password' dialog. (Enter the code exactly as written. You can use copy/paste operations to enter the code):

.::CODE::.

IMPORTANT: Please do not reply to this message to attempt to reset your password -- that won't work. You must enter the above information into the Steam application.

The Steam Support Team
http://www.steampowered.com

This notification has been sent to the email address associated with your Steam account.
For information on Valve's privacy policy, visit http://www.valvesoftware.com/privacy.htm.
This email message was auto-generated. Please do not respond.

11 years ago
Permalink

Comment has been collapsed.

It looked like:

Please do not reply to this email. This email has been sent by a machine, replies will not be read.

Hello,

Someone (hopefully you) has requested to reset your password at the Steam Support helpdesk. If you did not request this reset, please ignore this message.

To reset your password, please visit the following page: (link)

When you visit the above page (which you must do within 24 hours), you will be prompted to enter a new password. After you have submitted the form, you can log in normally using the new password you set.

The IP address of the person requesting this password reset is:

11 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 2 years ago.

11 years ago
Permalink

Comment has been collapsed.

Really? It would be great if it was just some scam but I've never received one before so I wasn't sure.

11 years ago
Permalink

Comment has been collapsed.

They look exactly like that.

11 years ago
Permalink

Comment has been collapsed.

I'm pretty sure the email for a password reset at Steam Support helpdesk does look like this.

That email means someone just used a password reset feature at Steam Support site by entering your username or email. It is not the same as Steam account password (unless you use same password everywhere), as the registration at Steam Support helpdesk is separate. I don't think there's anything to worry about as whoever entered it does not have your password. Just make sure your email account is secured.

11 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 2 years ago.

11 years ago
Permalink

Comment has been collapsed.

Looks like phishing to me. Steam doesn't send e-mails like this.
You may change your password if you want. But I've also got an e-mail (on 11/02/2012) for changing my password (which I didn't request) and I didn't do shit about it. Nothing ever happened.

11 years ago
Permalink

Comment has been collapsed.

Okay, thanks for the input! The reason I'm paranoid is because of an email I received from Origin once (thinking it was a scam) until I realized I couldn't log in anymore.

11 years ago
Permalink

Comment has been collapsed.

can you say the sender?

11 years ago
Permalink

Comment has been collapsed.

noreply@support.steampowered.com -- It looked legitimate to me but I've never dealt with them.

11 years ago
Permalink

Comment has been collapsed.

seems legit.

11 years ago
Permalink

Comment has been collapsed.

This is the entire email, I didn't want clickable links just in case it's phishy.

Email image

11 years ago
Permalink

Comment has been collapsed.

Do you have a Steam Support account? The one you need to send support tickets from. I'm fairly sure the e-mail is about that account, not your Steam account.

Edit: Nevermind, saw your posts below. Basically, someone tried to reset your Support account's password, but they need access to your e-mail to do it. Just make sure your e-mail is safe (using a password you have never used anywhere else and make sure any extra verification options are active) and you'll be fine even if your other accounts are compromised.

11 years ago
Permalink

Comment has been collapsed.

Yes and I changed the password but to change the password I didn't need a verification code.

Does this mean they just used my username to get sent a reset email? That would be a little less disconcerting.

11 years ago
Permalink

Comment has been collapsed.

Yes. Or your e-mail.

Without logging into a support account, trying to reset the password by entering either an e-mail or a username produced the same e-mail you got. Trying to change the password after logging in did not require e-mail confirmation at all.

11 years ago
Permalink

Comment has been collapsed.

When I get e-mails from Steam (because I have steam guard on and it sends me the code) it's from "support@steampowered.com"... I don't know if they just have a different e-mail for other things or what :S

11 years ago
Permalink

Comment has been collapsed.

So someone tried to change your support password? Is that different from your main account? Or do both use the same password? Also, your Steam Support account is different from your Steam account. So if the username and password is different, you do not have anything to worry about, in terms of your Steam account being stolen. Change both passwords just to be safe though. And make sure both are different.

11 years ago
Permalink

Comment has been collapsed.

They both use different passwords. I haven't changed Support's yet but I will.

11 years ago
Permalink

Comment has been collapsed.

I was able to change my support password without any email verification code so it would seem as though they didn't have it in the first place, right?

11 years ago
Permalink

Comment has been collapsed.

I would as a precaution change your email password and deauthorize any other machines from your steamguard. You should be fine then. Prolly nothing is going on atm neither, but if you do said steps you should be on the safe, and calm, side.

11 years ago
Permalink

Comment has been collapsed.

someone once told me this happens when someone tries to activate a key that is registered to your account. If i'm not mistaken it even was a support guy telling me this but i'm not 100% sure

11 years ago
Permalink

Comment has been collapsed.

Happened to me too, Someone just tried to activate a key you ninja'd no worries.

11 years ago
Permalink

Comment has been collapsed.

That's not the e-mail we're talking about.

11 years ago
Permalink

Comment has been collapsed.

Ah you are right, sorry that is what I thought it was from the op. Looked further in the comments and I see now. My bad.

11 years ago
Permalink

Comment has been collapsed.

Thanks for the input though! I appreciate everyone who tries to help.

11 years ago
Permalink

Comment has been collapsed.

No worries. It's just that a lot of people gave conflicting information throughout the thread. It would be nice if b521 could update the OP with what we discovered, to avoid confusion.

11 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 6 years ago.

11 years ago
Permalink

Comment has been collapsed.

Thanks! I was waiting for Support to respond to my ticket but I'm sure they'll say the same thing. It's such an anxious feeling trying to figure out just how much information someone else has and how they got it.

11 years ago
Permalink

Comment has been collapsed.

Closed 11 years ago by Wakawakaayay.