Suppose that, out of the blue, a Steam user tells yous they've accidentally reported you for something you didn't do, like making an illegal purchase, and that your Steam account is going to be suspended.

They ask you to message a Steam admin, whose profile they kindly provide, to help yous sort out this dilemma.

What do y'all practise?

At that place are some scams on Steam which take stood the examination of time. Their tactics and target accept remained by and large consistent for years. Phishing campaigns aimed at harvesting every bit many user credentials as possible, for example, are a dime a dozen. And let's not forget the many means a fraudster can dupe Counter Strike: Global Criminal offence (CS:GO) players.

Like Steam phishing campaigns, this particular Steam scam—referred to loosely as the "I accidentally reported you" or "I accidentally reported your account" scam—has been coming and going since initial reports of it emerged in late 2018. To date, information technology has no other target autonomously from Steam users. And, based on its new latest iteration, information technology targets Steam users with a Discord account.

For those who aren't aware of this scam and its variants, below is a breakup of how the scam works. On the other hand, if you're quite acquainted with it, dear Reader, so feel free to skip to the adjacent department.

The Steam scam playthrough

The hello

The fraudsters behind the "I accidentally reported you" scam usually arroyo their targets under the pretext that they need something, or they accept something to say. Anything to suggest that information technology's something important and that they should be heard out.

They may already be a Steam "friend", from a couple of days or years ago, someone in the same Steam group as you, or a user who wants y'all to add together them to your friends list.

These scammers are straightforward but polite, usually greeting you kickoff before asking if you're busy so equally non to intrude. They are even convincingly apologetic. (Image via Reddit user /u/Moritz_M05.

I'm then sorry just I accidentally reported your business relationship to the steam admin for scamming me and duping items instead of someone who impersonated your profile and that impersonator is a scammer who scammed me 🙁

In that location is no word-for-word script that scammers stick to, merely the gist is this: someone posing every bit you scammed them, only they reported y'all instead of the impostor.

Note that other variants of this scam will merits that they have reported y'all for "doing illegal purchases"—another reason to crusade a caste of alarm simply flawed, nonetheless.

The help

(Via /u/Moritz_M05)

I'thou worried near your account at present bro because the steam admin already ban his account

(Via /u/Moritz_M05)

if my study on your business relationship gets process you will go ban too just like the scammers account 🙁

At this point, the scammer drives the point that your account volition get banned next, unless something is done. The scammer then insinuates that help is on the way: a "Steam admin" that will cancel the written report and remove the target's account from the ban pile. Nonetheless, they should confirm that the written report against them was a mistake kickoff.

(Via /u/Moritz_M05)

ok then here is the contour of the steam admin if he accept just file a ticket to him that you are not involved in the report

The sharing of a legitimate profile—or what appears to be legitimate—that is connected to Steam or its developer, Valve, is 1 of the tactics scammers use to brand their claims await more than truthful.

If you raise the possibility that this Steam admin might not accept your friend asking, the scammer suggests that you lot contact them via Discord.

(Via /u/Moritz_M05)

can you lot add him on discord? and so that if he cannot discover your req on steam mayhap he will notice it on discord.

anyhow I need to show you something

Oh no, what now?

this is a answer about my report on your account

The scammer shows a purported response from "Jill", the Steam admin of this case, containing explicit instructions to contact the party who was mistakenly blocked and accept them contact her besides through Discord. She even left her Discord user name. (Via /u/Moritz_M05)

It's another reinforcement tactic, to erase any doubts yous may withal have. Frankly, it's overkill at this bespeak.

The hogwash

Convinced of what you must do and who you demand to contact, you make it bear on with the Steam admin. Of class, this admin is simulated and probable either the scammer or an accomplice.

Note that the tone of the conversation changes here. The scammer's concerned and helpful forepart is gone once y'all start chatting with the fake admin:

Hello there, Please state the reason why did you add me?

Afterward you briefly explain the situation, the simulated admin asks for a screenshot of the chat that transpired between you and the scammer.

I received the report according to our coordinator's review about illegal activity for Illegal Purchased but you don't accept to worry here if you're not really involved in the said issue. I will remove the banned report issue in your business relationship. All yous need to do is to prove that your account is in expert condition and it was a faux accusation so that Valve Written report Help Team will cancel the Banned report accuse on your account

The proof they ask for is a screenshot of your purchase history. They volition besides ask you to log out of your Steam account on your computer and/or mobile then they can "first the scanning of your account status". Of class, there is no scan. The fake admin asks this as a lead in to asking for more information—for starters, the email address tied to your Steam business relationship.

An email accost is needed when a Steam user finds themselves locked out of their account and they forgot their account name or password.

The imitation admin asks yous to get the verification code sent by Steam to your electronic mail address. If you happen to have Steam Guard enabled, the fake admin will enquire for the lawmaking as well.

Never give anybody your Steam Guard password.

In some cases, the fake admin will ask you to ship them the reported indistinguishable detail to check if it was, indeed, a duplicate via the Steam trading part. This is framed as "borrowing" the item, but you won't be getting it back.

If yous comply with the fake Steam admin y'all can lose your accounts, your game items, and even money.

Targets who question any of the tasks the fake admin asks them to do are met with the pressure level to respond quickly considering they're "running out of fourth dimension", they are presented with a fake certificate, or they are threatened with having their accounts deleted.

Fake Steam admin not giving y'all any option but to comply, or else. (Via /u/GatoTristeY)
I know, right? (Image taken from a hijacked Steam profile)

Although several Steam users will not reach this part of the scam, many aren't then lucky. Some, despite knowing that something is off, aren't 100 percent sure if they're dealing with a scammer or not.

Truthful social engineers, or just desperate?

What nosotros believed to be the get-go variant of this scam in 2018 was simple and solely focused on misusing the Steam trading part. This scam is now highly evolved and, one can say, has branched out into other nefarious acts, such equally hijacking accounts, rare particular theft, and other ways scammers can milk victims of their (or their parents') hard-earned money.

Like most scams, the "I accidentally reported you lot" scam relies heavily on social engineering tactics that aim at gaps in a Steam user'due south familiarity with how things piece of work within the platform's ecosystem.

Scammers want to appear believable, and so it's no surprise they employ already hijacked accounts that have a good continuing on Steam when reaching out to targets. The same can be said nearly Discord accounts nether their control.

Scammers refurbish accounts to make information technology look like a Valve employee by customizing its URL and providing more groundwork info. If this doesn't scream "I'thousand a Valve employee!", and then I don't know what does. (Via /u/CoffeeMapachi)

The scammers behind this scheme as well come prepared. Not only do they have the materials—screenshots and a guide script—they need to counter frequent questions raised well-nigh their credibility, they are also non agape to play on Steam users' fears, even at the risk of losing the brownie they already built up with their target.

Familiarize and exercise

Steam has always put the onus of non getting scammed onto the shoulders of its users. If you did go scammed, Steam Support volition assist to the best of their abilities, including getting your hijacked account dorsum. Only beyond this, similar retrieving a stolen rare item, refunding money if your business relationship has been used to purchase Steam souvenir cards (for example), they likely won't be able to aid.

That said, it's crucial for Steam users to realize that they may take blind spots and may not be as well acquainted with some aspects of the platform as they call back. Filling in these blind spots tin help y'all spot scams.

Know that:

  • There is no such matter every bit "Steam admin", imitation report, or a "Document of Eligibility".
  • There are Valve employees with Steam profiles. And they proudly brandish a legitimate badge to show this. They are top-tier moderators (mods) who have full ambassador privilege in Steam.
  • Real Valve employees belong to two invite-only groups, which are Valve and Steam.
  • There are Steam Community Moderators. Similar Valve employees, current and retired moderators accept their ain badges, too. Community moderators can ban users, among other things.
  • Real Steam Customs Moderators, both active and inactive, belong to the invite-only group, STEAM Community Moderators (SUFMods).
  • There is a folio where you lot can expect up all Steam Community Moderators.
  • Scammers link back to legitimate profiles of Valve employees or Steam moderators to hook targets into reaching out to through Discord. These Discord accounts are not manned by Valve employees but by scammers.
  • There is no such affair every bit an illegal particular. That said, there is no need for anyone to review an item.
  • If an item does need inspection, Valve employees would not crave yous to hand them over. They will just look it up in their database.
  • Duplicate items (or dupes) exist, only they are not illegal. Duplication was done years ago by Steam Back up to restore scammed or stolen items for hijacked victims. Steam Back up doesn't do this anymore.
  • If you take handed over an particular to someone claiming to be a "Steam admin", consider it gone forever. The electric current policy is that Steam Back up does non restore items that accept left an account, including scammed ones.
  • If there is a problem with your account, or you have an impending ban, Steam volition permit you know either via email, a Support ticket, or account alerts. Here is an example [link to business relationship-alert-sample] (taken from Steam on Reddit).
  • A Steam moderator will never contact you via chat or a 3rd-party app like Discord for any reason.
  • A Steam moderator will never mediate betwixt you and another user.

Secure your Steam account by using a stiff password, taking full advantage of Steam Baby-sit—Steam'south two-factor authentication method—and be aware of the latest scams that are targeting y'all as a Steam user. Keep the above points in heed, and stay safe!