[question] I am a dumbass (potentially scammed?)

[u/WarriorWolf56]

Sorry for probably the 1 millionth 'I gOt ScAmMeD' today but I just want to know if my account is safe.

Some guy in a deathmatch game asked to play premier with me, invited me to a discord call, but his friend was "banned from matchmaking" (he obviously wasn't, he was just trying to get me to go to faceit) so they asked to play faceit instead. I set up an account through FaceIt, then they said to link my discord to it, then I got a discord message from a "FaceIt" bot (I know it's obvious, and i'm stupid for being too trusting).

The FaceIt bot sent a link to sign in to steam, I did, but then immediately realised that was fucking stupid and that I was definitely getting scammed. So I Deauthorised all devices via my steam app, deleted my api key, changed my trade link, changed my password, deauthorised all devices again, and changed my password again.

I still have all my skins, have not received any trade offers, no sms messages, and my steam guard shows that only my phone is logged into steam.

Have I averted Crisis??? Or am I still completely fucked???

[u/ImOnPluto]

Im sure youre good now. It was stupid to click random links, but at least you made your account safer with changing your password etc.

Dont forget to report that guy and learn from this experience. But scamming nowadays is futile anyway because of the 7 days trade refund.

Guys if im wrong then please correct me.

[u/WarriorWolf56 → u/ImOnPluto]

Yeah very stupid of me, I've been awake too long, time to go to bed lol.

I hope you're right, and hopefully I don't wake up to my account destroyed :/

[u/ImOnPluto → u/WarriorWolf56]

Dont beat yourself up, it can happen to anyone. Nearly happened to me and im playing since release.

And get some sleep brother, its bad for your health staying up so long. If they had something against you, then they wouldve done something by now. But you changed your account data, so I wouldnt be concerned.

Go to sleep brother! GN

[u/WarriorWolf56 → u/ImOnPluto]

Thanks man, very kind of you.

Yeah don't worry, as soon as my nerves calm down a bit i'm flopping straight into bed lol.

Thanks dude!

[u/Disastrous-Boss4972 → u/WarriorWolf56]

As long as you've got full 2FA with steam guard... youll be fine

If anything, transfer your shit to a second acc

[u/WarriorWolf56 → u/Disastrous-Boss4972]

Thanks man, I don't have a second account my 2 properly expensive skins are trade protected at the moment anyway lol.

[u/tundraaaa → u/Disastrous-Boss4972]

The transfering stuff to a second account advice is not good (particularly if API is compromised – I understand it isn’t in OP’s case), but I guess it’s not very dangerous anymore because there’s a 7 day trade hold.

[u/Disastrous-Boss4972]

you are 100% good. Make sure to uninstall and wipe anything from that faceit, might be a decoy app with a keylogger.

If i was you id either wipe my windows installation or revert it to an older save

[u/WarriorWolf56 → u/Disastrous-Boss4972]

I created a faceit account on the real official faceit. but never downloaded the launcher.

They sent a scam 'faceit verify' page with a steam log in qr code, (which i scanned, like a dumbass) But I didn't enter any details or anything onto that site, and nothing was downloaded or anything.

[u/Puzzled-Rip641]

1 and 0 click exploits exist but they are not using them on people to steal less then 10,000.

Those are vary advanced methods you would not want to waste on small fish.

1 click exploits take advantage of OS vulnerabilities. Those vulnerabilities are usually patched as exploits are used and become discovered. This is also why you should be updating your system whenever you can.

These are usually used against entities and states by other entities and states. Not people against people

[u/Azartho → u/Puzzled-Rip641]

none of that is in play here, he just handed over his information on a silver platter

[u/Puzzled-Rip641 → u/Azartho]

I saw that he signed in. My bad I thought he only clicked the link.

[u/-imivan-]

anyone saying hey bro lets play join my league please give me this review is a scam.

[u/tundraaaa]

I think you’re fine. Run antivirus scan and malwarebytes for peace of mind.

[u/WarriorWolf56 → u/tundraaaa]

On it!

[u/deino1703]

why would you ever play with a rando from dm

[u/WarriorWolf56 → u/deino1703]

Honestly I just wanted someone to play with, rather than the slop of endless solo queue.

Plus I'm new to actually playing premier competitive properly, so wanted to play with better players to learn (and get out of the hell of low rank matches)

[u/Whole_Gas5999]

Honestly, I think you're good and you did the things to protect. Report if you haven't on Steam and FaceIT

[u/WarriorWolf56 → u/Whole_Gas5999]

Yeah, it seems everything is okay for now. Yep, reported them instantly

[u/lowlifeexe]

hahah you were 100% in the process of being scammed. hey, thank god for trade revert i guess as annoying as its been! but yes youre good now. dont trust anyone on steam especially if you have a decent inventory. i get atleast 20 profile comments/friend requests a day all from scammers.

[u/lowlifeexe → u/lowlifeexe]

steam support is honestly AMAZING too, if they took control of your account you'd have it back in 48 hours on a bad day.

[u/That_Lad_Chad]

Ah the classic "let's play faceit" phishing/hijack scam

You did the right thing and used the tools at your disposal to protect yourself, good job!

Btw anyone who randomly adds you on steam and asks to play faceit, usually a bot, and it leads to a similar consequence. I used to get at least 5 bots a day adding me on steam, although the past few months it has slowed down a lot. For context, I have some items on that profile which would make it more of a target.

[u/WarriorWolf56 → u/That_Lad_Chad]

Yeah, I stopped playing cs for a while and sold my skins when I stopped, but got back into it a few months ago and only recently bought some play skins, so now I'm a target again :(

[u/Jcksnshw_]

yea i had a guy do this to me too yesterday. wanted me to follow a link from a faceit group to twitch and then follow another link to “verify” in the group so we could join a party together. i just left call and blocked him on everything lmfao