yeah if the field is empty you're gucci

引用自 Ettanin：

yeah if the field is empty you're gucci

So that means I am safe to trade?

Stop using third party skin trading/gambling scam sites or clicking suspicious links
All third party skin trading/gambling sites are scams.

引用自 Emperor Byzantine：

So that means I am safe to trade?

If the page asks you to register a key, then the scammer had never managed to do so and you can trade without worrying.

引用自 Callahan420：

Stop using third party skin trading/gambling scam sites or clicking suspicious links
All third party skin trading/gambling sites are scams.

Yeah I know that but it wasn't that type of website.

引用自 blunus：

引用自 Emperor Byzantine：

So that means I am safe to trade?

If the page asks you to register a key, then the scammer had never managed to do so and you can trade without worrying.

Do you know how they were able to change my pfp and other parts of my profile? I know it was through the fake login qr code but did they not do anything more with my account because I have Steam Auth and they couldn't later because I reset my password and deauthorized access?

引用自 Emperor Byzantine：

引用自 blunus：

If the page asks you to register a key, then the scammer had never managed to do so and you can trade without worrying.

Do you know how they were able to change my pfp and other parts of my profile? I know it was through the fake login qr code but did they not do anything more with my account because I have Steam Auth and they couldn't later because I reset my password and deauthorized access?

They had access to your account. They couldn't do much else without auth access confirmations like trades but they can do things like add people pretending to be Steam staff and also view information like your purchase history which they can then use such information with their scam account to scare you into a confidence-based scam. They may also use your account to farm out scam links to your friends as part of a chain, plus they can change aspects of profiles to make it look like your account is 'suspended' or 'banned' in which scammers then contact you.

引用自 J4MESOX4D：

引用自 Emperor Byzantine：

Do you know how they were able to change my pfp and other parts of my profile? I know it was through the fake login qr code but did they not do anything more with my account because I have Steam Auth and they couldn't later because I reset my password and deauthorized access?

They had access to your account. They couldn't do much else without auth access confirmations like trades but they can do things like add people pretending to be Steam staff and also view information like your purchase history which they can then use such information with their scam account to scare you into a confidence-based scam. They may also use your account to farm out scam links to your friends as part of a chain, plus they can change aspects of profiles to make it look like your account is 'suspended' or 'banned' in which scammers then contact you.

Yeah thats what they did. As soon as they figured the gig was up they contacted me with a fake steam support profile and then changed basic stuff on my profile like my bio, pfp, and blocked all my friends. I was just curious exactly how much access they had, but it seems like steam auth did its job properly and I should be good now that I have everything reset, all devices unauthorized and so on. I was mainly checking the API key thing because I knew that was a followup part of the scam and I didn't want to accidently have my items stolen even after.