I still have access to my account. I haven't logged into any fake Steam websites though. My anti-virus and anti-malware programs didn't come up with anything. Thanks for the response.
Comment has been collapsed.
My concern is that they are attempting in the first place. My password is in no way easy to guess (long with various letters, numbers, case changes) and I don't think they have my password yet. I'm not sure how changing it would help.
Comment has been collapsed.
There are few options.
Comment has been collapsed.
If they sent you directions to reset your password, wouldn't that mean they have your email rather than your password? It could be that someone wanted to reset their own password but typed the wrong email which happened to be yours. If you don't get any other reset password requests, don't worry about it. If you are still worried, change your email password. If you have steamguard enabled, your email is more important.
Comment has been collapsed.
I haven't seen that kind of mail, it doesn't sound like the one you get if someone is trying to recover with just your email (I had one of those, still reported to Steam). So it sounds like they do have your account name... Which doesn't mean they "know" it, could still be an error or random.
Comment has been collapsed.
Instructions for the paranoid:
Step #1: Run a malware scan on your system to make sure there are no keyloggers.
Step #2: Change your Steam password from within the Steam Client.
Step #3: Change your email password, just in case.
Step #4: If you haven't already, turn on Steam Guard account security. If it IS already turned on, and if you've ever logged in from a system other than the one that you're using right now, reset Steam Guard by deauthorizing all other computers. This way somebody will need BOTH your Steam and email passwords in order to hack your account.
NOTE: Make sure that you use different passwords for each site, and make sure that they're stored in a secure password management system such as KeePass (free) or RoboForm (not free).
Comment has been collapsed.
Thank you! I'm doing this as we speak. When I changed my steam account password the email I got with a code to verify was different than the initial email. The first email only had my visible username (B521) while the other I was sent after I requested the change was my account name.
Comment has been collapsed.
Does the e-mail looks like this?
Dear you,
This is an automated message generated by Steam account administration to help you reset your Steam password.
Please enter the following code into the 'Verification Code' field of the 'Forgotten Password' dialog. (Enter the code exactly as written. You can use copy/paste operations to enter the code):
.::CODE::.
IMPORTANT: Please do not reply to this message to attempt to reset your password -- that won't work. You must enter the above information into the Steam application.
The Steam Support Team
http://www.steampowered.com
This notification has been sent to the email address associated with your Steam account.
For information on Valve's privacy policy, visit http://www.valvesoftware.com/privacy.htm.
This email message was auto-generated. Please do not respond.
Comment has been collapsed.
It looked like:
Please do not reply to this email. This email has been sent by a machine, replies will not be read.
Hello,
Someone (hopefully you) has requested to reset your password at the Steam Support helpdesk. If you did not request this reset, please ignore this message.
To reset your password, please visit the following page: (link)
When you visit the above page (which you must do within 24 hours), you will be prompted to enter a new password. After you have submitted the form, you can log in normally using the new password you set.
The IP address of the person requesting this password reset is:
Comment has been collapsed.
Really? It would be great if it was just some scam but I've never received one before so I wasn't sure.
Comment has been collapsed.
I'm pretty sure the email for a password reset at Steam Support helpdesk does look like this.
That email means someone just used a password reset feature at Steam Support site by entering your username or email. It is not the same as Steam account password (unless you use same password everywhere), as the registration at Steam Support helpdesk is separate. I don't think there's anything to worry about as whoever entered it does not have your password. Just make sure your email account is secured.
Comment has been collapsed.
Looks like phishing to me. Steam doesn't send e-mails like this.
You may change your password if you want. But I've also got an e-mail (on 11/02/2012) for changing my password (which I didn't request) and I didn't do shit about it. Nothing ever happened.
Comment has been collapsed.
Okay, thanks for the input! The reason I'm paranoid is because of an email I received from Origin once (thinking it was a scam) until I realized I couldn't log in anymore.
Comment has been collapsed.
noreply@support.steampowered.com -- It looked legitimate to me but I've never dealt with them.
Comment has been collapsed.
This is the entire email, I didn't want clickable links just in case it's phishy.
Comment has been collapsed.
Do you have a Steam Support account? The one you need to send support tickets from. I'm fairly sure the e-mail is about that account, not your Steam account.
Edit: Nevermind, saw your posts below. Basically, someone tried to reset your Support account's password, but they need access to your e-mail to do it. Just make sure your e-mail is safe (using a password you have never used anywhere else and make sure any extra verification options are active) and you'll be fine even if your other accounts are compromised.
Comment has been collapsed.
Yes and I changed the password but to change the password I didn't need a verification code.
Does this mean they just used my username to get sent a reset email? That would be a little less disconcerting.
Comment has been collapsed.
Yes. Or your e-mail.
Without logging into a support account, trying to reset the password by entering either an e-mail or a username produced the same e-mail you got. Trying to change the password after logging in did not require e-mail confirmation at all.
Comment has been collapsed.
So someone tried to change your support password? Is that different from your main account? Or do both use the same password? Also, your Steam Support account is different from your Steam account. So if the username and password is different, you do not have anything to worry about, in terms of your Steam account being stolen. Change both passwords just to be safe though. And make sure both are different.
Comment has been collapsed.
They both use different passwords. I haven't changed Support's yet but I will.
Comment has been collapsed.
I was able to change my support password without any email verification code so it would seem as though they didn't have it in the first place, right?
Comment has been collapsed.
someone once told me this happens when someone tries to activate a key that is registered to your account. If i'm not mistaken it even was a support guy telling me this but i'm not 100% sure
Comment has been collapsed.
Happened to me too, Someone just tried to activate a key you ninja'd no worries.
Comment has been collapsed.
Thanks! I was waiting for Support to respond to my ticket but I'm sure they'll say the same thing. It's such an anxious feeling trying to figure out just how much information someone else has and how they got it.
Comment has been collapsed.
30 Comments - Last post 51 minutes ago by brivid0boy
450 Comments - Last post 1 hour ago by klingki
7 Comments - Last post 6 hours ago by xXSAFOXx
16,297 Comments - Last post 7 hours ago by SebastianCrenshaw
52 Comments - Last post 8 hours ago by adam1224
206 Comments - Last post 11 hours ago by Joey2741
31 Comments - Last post 12 hours ago by Pika8
282 Comments - Last post 14 minutes ago by IgotElbows
202 Comments - Last post 18 minutes ago by xkingpin
45 Comments - Last post 27 minutes ago by DarkRainX
7,979 Comments - Last post 28 minutes ago by eeev
137 Comments - Last post 41 minutes ago by TheAgonist00
46 Comments - Last post 41 minutes ago by Shanti
22 Comments - Last post 42 minutes ago by UnknownDepth
Sorry, no giveaways here. I'm unfamiliar with Steam forums so I figured I would ask SG. Apparently someone has attempted to get into my Steam account. I was sent an email from Steam Support with directions on how to reset my password, which I ignored as instructed. I know it wasn't accidentally me because the IP address Steam sent me is in Russia. The whole situation reminds me of Origin's ordeal and it's making me nervous because my account was compromised then.
Does this mean someone has my account name?
I have SteamGuard but are there other steps I can take to prevent this from happening?
Should I be worried at this point, or does this happen to lots of people?
Thanks to anyone who can shed some light on this.
Edit: I think I've done everything I can. Thanks for all the helpful responses! I hope this thread will be useful to other people feeling anxiety in similar situations.
Update: The first line of the email is: "Someone (hopefully you) has requested to reset your password at the Steam Support helpdesk." It seems the email is what gets sent when you enter a username/email into the "forgot my password" section for your Steam Support account. None of my passwords have been changed (by anyone other than me) and I haven't received any further uninitiated mail.
Comment has been collapsed.