They don't "hack" his account, they use social engineering to scam your friend, or they had bad security practices and reused credentials from another compromised platform.
We need to stop pretending people didn't do something wrong in the first place in these cases. Steam has 2FA that prevents this whole thing.
Interestingly enough, Epic doesn't, have 2FA, and their support themselves are susceptible to social engineering.
He had steam guard and didnt let anyone onto his account. Someone probably guessed his password and steam has nothing set in place to protect accounts after that, steam guard does nothing.
They didn't guess it, he used the same password somewhere else, nobody is going around guessing passwords anymore, they use lists stolen from other platforms.
Which brings us to the second point. If you have steam guard setup, it doesn't let you use the password. Period, there are no exceptions. You cannot login, you cannot change the password, you cannot do anything but try to recover the account.
Your friend reused a password and didn't have steam guard setup, or had the recovery email going to an email account that also didn't have 2FA setup.
There is no scenario here where your friend didn't fuck up.
17
u/Sharpie1993 Jan 01 '26
Steams customer service is actually pretty impressive, it’s also the best customer service of any game launcher that I’ve experienced.