TR Forums

I just got an email from Steam saying to reset my password enter code bla and answer the secret question in the Steam Client. I haven't requested a password reset and the only other computer my credentials have ever been used on (at my parents') wasn't used to generate it either.
Is this somebody attempting to steal my account? It doesn't appear to be a phising scam; it's from the right email address and says not to reply to the email. I'm mostly just very confused.

Was it addressed specifically to you, or was it addressed to "Dear Steam user"?

Seeing as how you didn't ask for a password change, I think it's smells phishy.

Hoser wrote:

Seeing as how you didn't ask for a password change, I think it's smells phishy.

My concern is more that maybe somebody has figured out how to steal accounts when they're in some "lost password" phase than that somebody is hoping I email them my account details.

Look at the full header of the email that was sent, usually you can tell by what system it was sent by, Hotmail, yahoo, etc. If it lists something like then its a phishing attempt. (the emails from Valve usually say Valve.com if I remember correctly.)

In any case if you have a strong password disregard it. But if it something relativity easy I would change it.

I would notify Valve of this. If it's legit, they'll tell you so. Do not contact them through any info in the email. Go to the Steam website and use the info there.

SNM wrote:

Hoser wrote:

Seeing as how you didn't ask for a password change, I think it's smells phishy.

My concern is more that maybe somebody has figured out how to steal accounts when they're in some "lost password" phase than that somebody is hoping I email them my account details.

If you didn't ask for a password change, then your account would not be in that lost password phase to begin with. do as tanker said and check the full header of the email. You can also check the properties of it for more info. Like I said in my first response...you can send them an email with your concerns. I'm sure they'll look into it because of what happened to them a few years ago when someone hacked into their system & got customer cc #'s.

The way most web sites work is that anyone can request a password reset, just by knowing the account name. The key is that the information required to complete the reset goes only to the e-mail address which was registered to the account.

There are two possible scenarios in this case:

1) Someone else really has requested a reset for your account. As long as your e-mail account has not been compromised, this should be harmless.

-or-

2) It's a phishing scam.

Hoser wrote:

If you didn't ask for a password change, then your account would not be in that lost password phase to begin with.

Well, somebody else could have done it; I believe it just shows up on the Steam login box, doesn't it? So you put in somebody else's ID and then request a password reset.

do as tanker said and check the full header of the email.

I'm no expert, but that looks completely legit. Hops on a few Valve servers and then it gets into Google's system.

Like I said in my first response...you can send them an email with your concerns. I'm sure they'll look into it because of what happened to them a few years ago when someone hacked into their system & got customer cc #'s.

Yeah, I'm doing this now just for safety's sake....wait, no, I'm not. Valve has a lot of different addresses associated with their support system but they don't really like emails -- I can't even find one on their site! So perhaps it is a phishing attempt and they want you to reply so they can intercept. How very weird.

another possible option would be if someone uses the same username as you elsewhere and honestly thinks they own that account, when in reality they had to choose another name. that happened all of the time with one of my old user names. when I would go back and claim it I could enter the username or email associated with it. upon using my email, I had a different username than I remembered.

SNM, did you start here Create a New Support Account https://support.steampowered.com/register.php ?