{
  "schema": "phishdestroy.text-export.v1",
  "object_type": "Published page text and corresponding PDF digest",
  "id": "support_canned_refusals.html",
  "language": "en",
  "title": "Steam Support Refusals & Canned Responses Archive — The Steam Dossier",
  "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals",
  "source_html_sha256": "f7b09cad878b14309e8d176b2d7babfa399672d77372adf4962c09028acadfa6",
  "exported_at": "2026-09-30T21:13:40.424Z",
  "scope": "Print reading edition. Research prose is retained; raster images and identified visual catalogues are replaced by source links. See editorial_scope for exact omissions. Support archive exports retain the core discussion and link the full gallery.",
  "editorial_scope": {
    "policy": "Research prose, conclusions, methodological limits and analytical tables retained without paragraph truncation. Named catalogues and visual galleries are linked; raster images are not embedded.",
    "linked_sections": [],
    "raster_images_replaced": 0
  },
  "license": {
    "identifier": "CC0-1.0",
    "url": "https://creativecommons.org/publicdomain/zero/1.0/",
    "rights_statement_url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/license-rights.json",
    "rights_statement_sha256": "80d67354f8e5efd65b03696be950fb0f95c188d0089b1604281d0a4daff3f4cb",
    "application": "Authored research materials; third-party materials retain their own rights."
  },
  "pdf": {
    "filename": "support_canned_refusals.pdf",
    "url": "https://phishdestroy.io/steam_dossier/exports/pages/en/support_canned_refusals.pdf?v=print-20260930-links-v6",
    "sha256": "e31ba1eb78a5071d6f067543895ca441e0400bd627f2fdf43c601f64c6faf4a7",
    "bytes": 59569,
    "pages": 2
  },
  "integrity": {
    "signed_object": "support_canned_refusals.content.json",
    "scope": "The exact UTF-8 bytes of this JSON file. It contains the published text and identifies the corresponding PDF by SHA-256. It is distinct from the separately signed rights statement.",
    "signature_file": "support_canned_refusals.content.json.asc",
    "digest_file": "support_canned_refusals.content.json.sha256",
    "format": "ASCII-armored detached OpenPGP",
    "signing_key_fingerprint": "129FC7F39C40C69D2EF3C329BFCF9E8DD295EE01",
    "public_key": "https://phishdestroy.io/.well-known/pgp-key.txt",
    "verify": [
      "gpg --import pgp-key.txt",
      "gpg --verify support_canned_refusals.content.json.asc support_canned_refusals.content.json",
      "sha256sum -c support_canned_refusals.content.json.sha256"
    ]
  },
  "content": {
    "text": "Dieses Material ist auf Englisch verfügbar.Zurück zum Dossier · Deutsch ↗\nWHAT THIS SECTION PROVES\n\nThis repository documents 137 preserved primary screenshots and 1,505 audited victim appeals detailing Valve's automated support ticket handling. It proves that when accounts are compromised via OpenID redirection or unauthorized API key generation, Steam Support systematically employs standardized canned refusals without technical investigation. By categorically declining item restorations or audit trail disclosures, the platform shifts full liability for structural authentication flaws onto compromised account holders.\n\nAll screenshots are preserved third-party captures. Copyright and content remain with their respective authors and platforms (Reddit users, Steam Community authors, Trustpilot reviewers, X and YouTube posters). They are reproduced for identification and public-interest reporting only; no ownership is claimed. Each exhibit links to its primary source.\n\nFigures reported on the source page\nMeasure\tReported value\tScope\nDocumented Records\t1505\tVerified victim appeals and ticket threads\nPreserved Screenshots\t137\tHigh-resolution ticket captures stored locally\nRestoration Rate\t0.0%\tReversals granted in API-key trade hijackings\nTemplate Duplication\t100%\tVerbatim script reuse across staff (Ilya, Roger, Maverick)\nForensic Evidence: The Three Core Pillars of Support Refusal\nPILLAR 01 · ADMISSIONExhibit R-014\nThe Roger Admission: API MitM Confirmed\n\nIn ticket response #1cp582i, Steam Support staff \"Roger\" admits in writing that attackers cancel legitimate trades via API and swap them with clone bots in milliseconds, but refuses to restore items and tells the victim to seek a \"local PC technician\".\n\nInspect Written Admission ↗\nPILLAR 02 · ESCALATIONExhibit R-012\n7-Day Trade Hold Inaction\n\nA victim provided SteamID64 of the hacker's accounts during the 7-day trade hold window. Support staff \"Artem\" and \"Ilya\" refused to freeze the stolen items, citing virtual item scarcity, and closed the ticket with an automated template.\n\nInspect Multi-Staff Transcript ↗\nPILLAR 03 · POLICYExhibit R-002\nMarket Scarcity Over Property Rights\n\nValve's official Item Restoration Policy explicitly states that items are not returned because restoring them would \"reduce scarcity and inflate the economy, lowering the value of items on the Community Market\".\n\nInspect Policy Screenshot ↗\nHistorical Genesis · 22 March 2018 to 2026\nExhibit H-003 · 8-Year Unpatched Attack Surface\nThe Earliest Recorded Trade Substitution (22 March 2018)\n\nExactly one week before Valve imposed its controversial 7-day trade cooldown on Counter-Strike items, the trading community discovered the first live instances of the Steam Web API Trade Redirection exploit. Attackers hijacked web sessions to generate an unauthorized API key at steamcommunity.com/dev/apikey without mobile 2FA confirmation, enabling bots to cancel and swap trades in real time.\n\nMarch 2018 PSA Warning: \"The scammers can automatically detect this trade offer and will decline it on your account, because they have your Steam API key. The scam bot will now send you a trade offer for the same skins... and you won't notice a difference!\"\nHistorical Evidence Trail\n22 Mar 2018: First documented API swap\n2019: Support standardizes \"malware\" deflection\n2020: \"Closing help request\" script hardened\n2022–2026: BitB & QR phishing automation\nOpen Original 2018 Reddit Thread ↗\nPrimary sources\n\n137 gallery cards refer to 78 distinct primary URLs. Images and repeated exhibit captions are omitted from this reading edition.\n\nFull visual archive and original captures",
    "headings": [
      {
        "level": 2,
        "id": null,
        "text": "Figures reported on the source page"
      },
      {
        "level": 2,
        "id": null,
        "text": "Forensic Evidence: The Three Core Pillars of Support Refusal"
      },
      {
        "level": 3,
        "id": null,
        "text": "The Roger Admission: API MitM Confirmed"
      },
      {
        "level": 3,
        "id": null,
        "text": "7-Day Trade Hold Inaction"
      },
      {
        "level": 3,
        "id": null,
        "text": "Market Scarcity Over Property Rights"
      },
      {
        "level": 3,
        "id": null,
        "text": "The Earliest Recorded Trade Substitution (22 March 2018)"
      },
      {
        "level": 2,
        "id": null,
        "text": "Primary sources"
      }
    ],
    "links": [
      "https://phishdestroy.io/steam_dossier/de/support_canned_refusals.html",
      "https://www.reddit.com/r/csgo/comments/1cp582i/i_got_api_scammed_what_do_i_do_now/",
      "https://www.reddit.com/r/DotA2/comments/1e5ovy4/my_account_was_hacked_and_steam_support_refuse/",
      "https://www.reddit.com/r/Steam/comments/3b2abd/steam_will_no_longer_restore_scammed_items_item/",
      "https://www.reddit.com/r/GlobalOffensiveTrade/comments/863tk1/psa_urgent_huge_scam_happening_read_here_how_to",
      "https://phishdestroy.io/steam_dossier/support_canned_refusals#gallery-grid"
    ]
  }
}