In the Imgur Provided https://imgur.com/a/PwWLtNl

Has anyone encountered these type of random private messages recently?
I am not friends with these people and somehow they are able to send these Messages which baffles me that I've contacted Steam Support Yesterday awaiting their response.

I've blocked around 10 people by now and wonder how are they sending these private messages and why now of all times.
Was there a Steam breach? A Steam Update or something that allows you to Message people who aren't your friends?

Incase of a Duplicated Thread if someone made one, please direct me there so I can learn more.

Edit: This is now quite alarming.

Edit 2: Thx to a Developer who posted here, this is how the Scammers/Hackers are able to exploit sending messages
https://github.com/poespas/steam-force-chat


Update by Steam Support on these Intrusive Message of Scammers/Hackers using the Github exploit.
Hey there,

Thanks for reaching out to Steam Support.

To answer your question, there's a couple of different ways for a user to send you a chat message if they are not your friend. The most likely method, would be if you are in a group chat, any user that is also apart of the chat will have the ability to send you a private message. You'll be presented with the message you saw in your screenshot and have the ability to block them before actually seeing their message. I can really only encourage you to use your best judgement when receiving these messages from non-friends. If you'd like some information how to avoid scammers moving forward, check out our Trade Scams article.

To address the github script you mentioned, unfortunately Valve / Steam is not affiliated with the website in question. As such we have no way of removing content from their website.

Finally, I want you to know we absolutely value feedback from the Steam community, and I'm forwarding your comments on to the appropriate department.

Additionally, I would encourage you to share any opinions, suggestions, or ideas with the community as well, by posting on the Suggestions/Ideas section of the Steam Discussion forums.

This forum is regularly read by Valve's development team.

Please let me know if you have any other questions and I'll be happy to assist you.

Steam Support


Everyone, we must voice our concerns at the Steam Forums.
https://steamcommunity.com/discussions/forum/10/
The Valve Team must acknowledge this problem.

You can also go through Customer Support and Reddit.

Edit: 3 Seems many Groups have made Announcement of these Suspicious Messages going through around and their Admins has been kicking members and reported them to Valve and Steam Community.

6 years ago*

Comment has been collapsed.

Yes it's been happening for the past days, there's an exploit, and people can message you without being in same groups / friendlist / friends of friends friendlist.

6 years ago
Permalink

Comment has been collapsed.

its weird. never used to get these - steam probably never even had this functionality, but every time valve pushes an update it seems to make things worse. Pretty bone-headed move on valves part to make this a function of the platform... not that they seem to give a shit any more.

6 years ago
Permalink

Comment has been collapsed.

heh got another one just now. thanks valve.

6 years ago
Permalink

Comment has been collapsed.

Hopefully it gets fixed soon.

6 years ago
Permalink

Comment has been collapsed.

i got about 50 messages invite who look like this in the past week most of them 3 last day
the thing i noticed after blocking communication of all users one did send me message again i don't know how it happened

6 years ago
Permalink

Comment has been collapsed.

I got one from someone with a profile pic with boobies in them. It was very hard to ignore, but in the end I managed to do it!

6 years ago
Permalink

Comment has been collapsed.

Did get one of those messages looked message and blocked all communications from them.

6 years ago
Permalink

Comment has been collapsed.

Hmm, didn't know this recently became a feature. Luckily, messaged from those malicious bots are usually really easy to recognize!

6 years ago
Permalink

Comment has been collapsed.

Not really a Feature now since its an Exploit found by downloading the script off Github

6 years ago
Permalink

Comment has been collapsed.

I hope they implement an option to disallow non-friends from sending messages over group chat( discord has that function) although I'm not really in any group chat lol. Luckily I've yet to receive any spam :)

6 years ago
Permalink

Comment has been collapsed.

You don't have to be in any Group Chat. The Github exploit will allow them to just send the message directly to you.

6 years ago
Permalink

Comment has been collapsed.

yes, I read that but this option should be updated into the chat system as well.

6 years ago
Permalink

Comment has been collapsed.

I am, I just blocked them after reading what is inside

6 years ago
Permalink

Comment has been collapsed.

Happened to me yesterday. I blocked this person.

6 years ago
Permalink

Comment has been collapsed.

I've had every malicious thing possible on Steam. Everything. At some point, you just have to laugh at the idiots.

6 years ago
Permalink

Comment has been collapsed.

I want to know one thing: All the users who're reporting getting suspicious messages from users, not in your friend list, are you all logged into any kind of Steam Group (most probably Public groups) Chat?

If you're then anybody can contact you through there, obtaining your chat head through the list of members logged into chat, whether they're online/offline that really doesn't matter.

For members of Closed Steam Groups, you should contact the group admins (with proof) immediately about weeding out the scammers.

6 years ago
Permalink

Comment has been collapsed.

Not in any group chats and received no messages. In around 360 groups though.

6 years ago
Permalink

Comment has been collapsed.

This is a Script that Force Send Message to you.
You don't have to be in a Group Chat.
Look closely at the Image.
The Github is the Script.
Its a Chat Exploit.

6 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 6 years ago.

6 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 5 years ago.

6 years ago
Permalink

Comment has been collapsed.

This is a Script that Force Send Message to you.
You don't have to be in a Group Chat.
Look closely at the Image.
The Github is the Script.
Its a Chat Exploit.

6 years ago
Permalink

Comment has been collapsed.

Yup, I got this too. Accepted communication out of curiosity but instantly blocked him.

6 years ago
Permalink

Comment has been collapsed.

Still waiting for the 2 AWP's i have won without entering any sort of contest. xD

6 years ago
Permalink

Comment has been collapsed.

I also got 2 messages with this warning these last few days, I wonder how many more do we need to receive before valve does something about it...
The fact that there's a warning makes me think they already knew this could happen, or maybe the warning is meant only for messages from group members that aren't in our friend list and they didn't see this coming at all.

6 years ago
Permalink

Comment has been collapsed.

Yeah, I got this as well. OFC the account had a picture of a pretty girl and the name was 'Kiley :3' but the name history also showed 'Alice :3'.

In my case, 'she' asked me for some kind of urgent help...

I mean, it's pretty obvious to me that these are fake accounts.
First of, the picture of a pretty girl combined with an overly girly name and these silly 'cute' emoticons or whatever and all of it on a private profile. The last one alone is enough for me to ignore a request or, if I judge it suspicious I just block it straight off.

6 years ago
Permalink

Comment has been collapsed.

This is so annoying. I've got over 20 messages in the last hour.

6 years ago
Permalink

Comment has been collapsed.

I agree it's pretty annoying as it does popup a sounded notification, and you know it's spam. Hope they fix this soon

6 years ago
Permalink

Comment has been collapsed.

Finally got myself one too, big-boobed Jessica wanted me to like her youtu.be video, which got me curious if that can be some kind of scam other than cashing in from Google with all the views.

6 years ago*
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 1 year ago.

6 years ago
Permalink

Comment has been collapsed.

Ha! I had a Jessica message me too. Prolly the same one xD

Out of curiousity, did you click the link? I wont lie, I got really curious if it really was a video and theyre trying to milk views, but not enough to click a mystery link lol

6 years ago
Permalink

Comment has been collapsed.

She's mine, stay away!

I was meaning to check but accidentally closed the message window when going to check her profile. But at least it was on YT so can't be anything that good. Shame Steam most likely blocks all tempting links like "Hey check my debute video on PornHub!", that would get many more clicks no doubt :P

6 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 6 years ago.

6 years ago
Permalink

Comment has been collapsed.

Valve seems to be taking their typically stance on these things,

  • Create something with the best of intentions
  • It has an unintentional consequence (flashing notification that you can't turn off without turning off all notifications from friends)
  • Bots exploit to critical mass levels
  • Valve gets flooded with user reports
  • 5 Years later a fix (~Anyone remember when group notifications couldn't be blocked)

I've disabled notification alerts for now to mitigate, but as long as you're in a bunch of public groups you're going to get a bunch everyday.
The fix for valve is easy, give an option to block messages from ppl not on our friends list. (Or at least put a level threshold on random message requests)

6 years ago*
Permalink

Comment has been collapsed.

They might take action much sooner if it involves punishing innocent users, like requiring to spend $5 on Store every month to be able to send any messages.

6 years ago
Permalink

Comment has been collapsed.

Yeah, a lot of "go check this video" or "click on this link for 15$ wallet" and such...
Block all the way.

The new chat/friends stuff is shit anyway....

6 years ago
Permalink

Comment has been collapsed.

got a few myself yesterday. Did not accept any of the messages so I don't know what they say but safe to assume they are spam or malicious.

6 years ago
Permalink

Comment has been collapsed.

The real crime is that internet explorer shortcut in your taskbar, though.

Jokes aside, got one too and it concerned me. Blocked it without reading but was worried it might have been something legit.
Surely steam will fix it like they did with the previous spambot rise a few years ago.

6 years ago
Permalink

Comment has been collapsed.

Thats Microsoft Edge XD At least it ran better when I want to open Multiple Bars while multitasking on Steam and/or Bluestack without Chrome raping my RAM.

Steam will fix it but they need enough people spamming their Reddit and Suggestion Forum for this Concern of an exploit.

6 years ago
Permalink

Comment has been collapsed.

Sign in through Steam to add a comment.