Steam Idea: Get your account back when compromised.

[AphexDreamer]

I realize this isn't a steam forum but a good many of us here on TPU use steam. I also realize that most us that do use steam are safe and secure and know better to avoid phishing sites and the likes. However, there are people who are extremely unlucky or not as wise who unfortunately do get their steam account hacked. And no matter how many games you have bought, this is bad. I believe steams current method of getting your account back effective but extremely inefficient. 2 Days of waiting (Or More) is far to long for a hacker to have your account. This should be the last attempt to get your account back.

So I've thought a bit for ways that would be safe and effective and not spamable (Or in the event someone did spam it easily taken care of).

Solution for Stolen/Hijacked Accounts

Steam should have the options for CC or Paypal verfication the moment an account is reported as Stolen or Hijacked.

For example.

I used certain CC information or perhaps a paypal account to purchase something on steam.

My account gets stolen.

I report through steam my account is stolen.

Steam should then instantly suspend the account. And require you to go through the Account Hijacked/Stolen Process.

Here is how I image the process to be.

Most likely your account got stolen due to a compromised computer (Keyloggers, virus, etc...) all you would be required to do is install steam on a known safe PC, click the My Account has been Stolen/Hijacked button insert your steam account name and go through the process. It would post a warning message something like "WARNING! Get on a PC other than the One you Got Hacked on before Proceeding." Due to keyloggers be sure you are on a safe PC scanned and free of all virus and maleware." You would then type in your Steam Account name and be required to either login to paypal or type in relevant CC information used to purchase previous games on your Steam Account. Once verified it will ask you for a new email address (Never before used) don't have one, make one and then change your pass from there. If for some reason this fails or for some reason you can't use this method, you can proceed with the longer steam account retrieval process.

Perhaps they could even release a septate program just for events like this. So you would download and use to get your PC back. Maybe it would even know the IP address you've used to login to steam and require you to use steam on a new PC at a different location.

Thoughts on this? Bad, Good, Well maybe if you did this..., waste of time and effort?

[digibucc]

yeah but then people can just randomly claim your account stolen and lock you out of it. people are p#$@ks like that.

[qubit]

Good post. I'll read it properly later and comment. At work now.

[slyfox2151]

linking it with an SMS to reset your password would be nice. in the same way internet banking is linked to my phone number, if i try to send more then $XXXX money it will send a code to my phone witch i then have to input to complete the transaction.

[AphexDreamer]

Originally Posted by digibucc

yeah but then people can just randomly claim your account stolen and lock you out of it. people are p#$@ks like that.

I thought about that, thats what I meant about spamable... But if your PC isn't really stolen then you have nothing to worry about. You just put your info in and get back in. Take maybe 5 min at most and you get play again.

Also you could make it so that you can't spam the account hijacked button for a ceratin account. Once its been done and your account has successfully been retrieved, you have to wait like a day before being able to do it again. With a message like "Account has been Retrieved. Wait time 23:59:22..."

Originally Posted by slyfox2151

linking it with an SMS to reset your password would be nice. in the same way internet banking is linked to my phone number, if i try to send more then $XXXX money it will send a code to my phone witch i then have to input to complete the transaction.

Yeah or that would be great too! If they could do that I'd set it up.

[brandonwh64]

I keep a print out of most of my game purchases on paypal just in the event this happens.

[AphexDreamer]

Originally Posted by brandonwh64

I keep a print out of most of my game purchases on paypal just in the event this happens.

Yea but submitting a ticket and waiting for them to reply can take a bit. Sometimes its relatively fast. But IMO 2 Days is far to long. My account got recently hacked and I'm on my second day here still waiting for a reply to my ticket.

The idea is to obtain your account as fast and reliably as possible.

[brandonwh64]

There is really no fast way to do it cause in the end your still waiting on steam to review your case and give you the account back

[digibucc]

Originally Posted by AphexDreamer

I thought about that, thats what I meant about spamable... But if your PC isn't really stolen then you have nothing to worry about. You just put your info in and get back in. Take maybe 5 min at most and you get play again.

Also you could make it so that you can't spam the account hijacked button for a ceratin account. Once its been done and your account has successfully been retrieved, you have to wait like a day before being able to do it again. With a message like "Account has been Retrieved. Wait time 23:59:22..."

Yeah or that would be great too! If they could do that I'd set it up.

i see where you are going and like it, im all for extra security on an account i have spent thousands of dollars on.

but with the recent security change, a secure email and password, the system is pretty secure. i know what happened to you, and it sucks - i also dread the day it may happen to me...

but i simply don't want a solution that may make it so i get locked out of my legitimate account, for any period of time. i hate having to type my password in when it "refreshes", etc. I do not want to have to verify I am the owner of my own account , simply because someone else hit a button,

I also don't want there to be a lock out period, where i can't use my games for a day or even hours , because it got marked as hacked once already.

I know you are just trying to consider options, and it's a good thing to do. just remember 99% of users are like me in this area, and Valve knows it. that's why they have not made a more intrusive security system as of yet. the chances of your account getting hacked if you follow precautions is very low, and to inconvenience customers (even a tiny bit) to lower the already low chances is not a smart business move.

fast or secure, it's a choice not a combo.

[AphexDreamer]

Originally Posted by digibucc

i see where you are going and like it, im all for extra security on an account i have spent thousands of dollars on.

but with the recent security change, a secure email and password, the system is pretty secure. i know what happened to you, and it sucks - i also dread the day it may happen to me...

but i simply don't want a solution that may make it so i get locked out of my legitimate account, for any period of time. i hate having to type my password in when it "refreshes", etc. I do not want to have to verify I am the owner of my own account , simply because someone else hit a button,

I also don't want there to be a lock out period, where i can't use my games for a day or even hours , because it got marked as hacked once already.

I know you are just trying to consider options, and it's a good thing to do. just remember 99% of users are like me in this area, and Valve knows it. that's why they have not made a more intrusive security system as of yet. the chances of your account getting hacked if you follow precautions is very low, and to inconvenience customers (even a tiny bit) to lower the already low chances is not a smart business move.

fast or secure, it's a choice not a combo.

The lockout wasn't for you. The 24 Hours lock prevents any person attempting to spam your account as Hijacked from doing so.

I understand I'm like that too! Thats why I'm exploring the idea. Like I said 5 min and make it so it can only be done once a day. That way if a hacker targets your account and manages to get through the next day you can get your account back versus waiting 2+ days via Support Ticket.

Originally Posted by brandonwh64

There is really no fast way to do it cause in the end your still waiting on steam to review your case and give you the account back

No. Thats to be a last resort. This is more of an automated process to get your account back faster.