{
  "schema": "phishdestroy.text-export.v1",
  "object_type": "Published page text and corresponding PDF digest",
  "id": "zh/support_canned_refusals.html",
  "language": "zh",
  "title": "Steam 支持请求被拒及预设回复存档——《Steam》档案",
  "source_url": "https://phishdestroy.io/steam_dossier/zh/support_canned_refusals",
  "source_html_sha256": "00c3b1636fd8954ea50ed1c41a90e18451a345c1fa73e4db64f4cd1c5dd3d72b",
  "exported_at": "2026-09-30T21:15:54.746Z",
  "scope": "Print reading edition. Research prose is retained; raster images and identified visual catalogues are replaced by source links. See editorial_scope for exact omissions. Support archive exports retain the core discussion and link the full gallery.",
  "editorial_scope": {
    "policy": "Research prose, conclusions, methodological limits and analytical tables retained without paragraph truncation. Named catalogues and visual galleries are linked; raster images are not embedded.",
    "linked_sections": [],
    "raster_images_replaced": 0
  },
  "license": {
    "identifier": "CC0-1.0",
    "url": "https://creativecommons.org/publicdomain/zero/1.0/",
    "rights_statement_url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/license-rights.json",
    "rights_statement_sha256": "80d67354f8e5efd65b03696be950fb0f95c188d0089b1604281d0a4daff3f4cb",
    "application": "Authored research materials; third-party materials retain their own rights."
  },
  "pdf": {
    "filename": "support_canned_refusals.pdf",
    "url": "https://phishdestroy.io/steam_dossier/exports/pages/zh/support_canned_refusals.pdf?v=print-20260930-links-v6",
    "sha256": "3b8f36250d53d8825ed8741da41ccc57cdae1d4b8e678b726271109577bd2cb3",
    "bytes": 239215,
    "pages": 2
  },
  "integrity": {
    "signed_object": "support_canned_refusals.content.json",
    "scope": "The exact UTF-8 bytes of this JSON file. It contains the published text and identifies the corresponding PDF by SHA-256. It is distinct from the separately signed rights statement.",
    "signature_file": "support_canned_refusals.content.json.asc",
    "digest_file": "support_canned_refusals.content.json.sha256",
    "format": "ASCII-armored detached OpenPGP",
    "signing_key_fingerprint": "129FC7F39C40C69D2EF3C329BFCF9E8DD295EE01",
    "public_key": "https://phishdestroy.io/.well-known/pgp-key.txt",
    "verify": [
      "gpg --import pgp-key.txt",
      "gpg --verify support_canned_refusals.content.json.asc support_canned_refusals.content.json",
      "sha256sum -c support_canned_refusals.content.json.sha256"
    ]
  },
  "content": {
    "text": "本节证明了什么\n\n本仓库收录了 137 保存的原始截图，以及 1,505 经审核的受害者申诉记录，详细说明了 Valve 的自动化支持工单处理流程。这些资料证明，当账户因 OpenID 重定向或未经授权的 API 密钥生成而遭到入侵时，Steam 客服部门会系统性地采用标准化的模板化拒绝回复，而不会进行技术调查。通过一概拒绝恢复物品或披露审计日志，该平台将结构性身份验证缺陷的全部责任转嫁给了账户遭入侵的用户。\n\nWhat this means — OpenID and openid.realm\n\nOpenID is the sign-in standard behind the “Sign in with Steam” button: the site does not receive the password, Steam confirms the identity to it. openid.realm is the field carrying the address of the site asking for the sign-in, and openid.return_to the address Steam is to send the user back to. Steam receives both on every request and prints the realm on its own login page — which is why this dossier can name the host each platform authenticates through.\n\nSection 3 — the observed routes →\n\n所有截图均为第三方截图。版权及内容归各自的作者和平台所有（Reddit用户、Steam社区作者、Trustpilot评论者、X及YouTube发布者）。这些截图仅用于识别和公共利益报道，不主张任何所有权。每张截图均附有指向其原始来源的链接。\n\nFigures reported on the source page\nMeasure\tReported value\tScope\n书面记录\t1505\t已核实的受害者申诉和罚单讨论帖\n保存的截图\t137\t本地存储的高分辨率票据截图\n恢复率\t0.0%\tAPI起关键交易劫持案获准撤销\n模板复制\t100%\t员工之间（伊利亚、罗杰、马维里克）的逐字脚本复用\n法医证据：拒绝配合的三大支柱\nPILLAR 01 · 招生附件 R——014\n罗杰的供认：API 中间人攻击（MitM）已确认\n\n在工单回复 #1cp582i 中，Steam 的客服人员“Roger”以书面形式承认，攻击者通过 API 在几毫秒内取消合法交易，并用克隆机器人替换，但他拒绝恢复物品，并让受害者去找“当地的电脑维修人员”。\n\n查阅书面录取通知 ↗\n支柱 02 · 升级处理附件 R——012\n7-日内交易：持仓不作为\n\n一名受害者在7-的日交易冻结期内提供了黑客账户的SteamID64。客服人员“Artem”和“Ilya”以虚拟物品稀缺为由，拒绝冻结被盗物品，并使用自动生成的模板关闭了工单。\n\n查看多员工成绩单 ↗\n支柱 03 · 政策附件 R——002\n市场稀缺性与产权\n\nValve 的官方物品恢复政策明确规定，不会退还物品，因为恢复物品会“降低稀有度并导致经济膨胀，从而降低社区市场中物品的价值”。\n\n查看政策截图 ↗\n历史起源 · 22 3月 2018 至 2026\n附件 H——003 · 8-未打补丁的攻击面\n有记载的最早贸易替代案例（22 March 2018）\n\n就在Valve对《反恐精英》道具实施备受争议的7-日交易冷却期整整一周前，交易社区发现了首批实际出现的 Steam Web API 流量重定向漏洞API. 攻击者劫持了 Web 会话，在 steamcommunity.com/dev/apikey 在没有移动端2FA确认的情况下，允许机器人实时取消和更换交易。\n\n3月2018公益广告警告： “诈骗者可以自动检测到这笔交易请求，并会在你的账号上拒绝它，因为他们掌握了你的Steam API密钥。随后，诈骗机器人会向你发送一份包含相同皮肤的交易请求……而你根本不会察觉其中的异样！”\n历史证据步道\n22 3月2018: 首例有记录的API引擎互换\n2019: 该支持措施规范了“恶意软件”的拦截机制\n2020: “关闭求助请求”脚本已加强安全性\n2022–2026: BitB 与二维码钓鱼自动化\n打开 Reddit 上的原始帖子 2018 ↗\nPrimary sources\n\n137 gallery cards refer to 78 distinct primary URLs. Images and repeated exhibit captions are omitted from this reading edition.\n\nFull visual archive and original captures",
    "headings": [
      {
        "level": 2,
        "id": null,
        "text": "Figures reported on the source page"
      },
      {
        "level": 2,
        "id": null,
        "text": "法医证据：拒绝配合的三大支柱"
      },
      {
        "level": 3,
        "id": null,
        "text": "罗杰的供认：API 中间人攻击（MitM）已确认"
      },
      {
        "level": 3,
        "id": null,
        "text": "7-日内交易：持仓不作为"
      },
      {
        "level": 3,
        "id": null,
        "text": "市场稀缺性与产权"
      },
      {
        "level": 3,
        "id": null,
        "text": "有记载的最早贸易替代案例（22 March 2018）"
      },
      {
        "level": 2,
        "id": null,
        "text": "Primary sources"
      }
    ],
    "links": [
      "https://phishdestroy.io/steam_dossier/zh/#proxy-bypass-explainer",
      "https://www.reddit.com/r/csgo/comments/1cp582i/i_got_api_scammed_what_do_i_do_now/",
      "https://www.reddit.com/r/DotA2/comments/1e5ovy4/my_account_was_hacked_and_steam_support_refuse/",
      "https://www.reddit.com/r/Steam/comments/3b2abd/steam_will_no_longer_restore_scammed_items_item/",
      "https://www.reddit.com/r/GlobalOffensiveTrade/comments/863tk1/psa_urgent_huge_scam_happening_read_here_how_to",
      "https://phishdestroy.io/steam_dossier/zh/support_canned_refusals#gallery-grid"
    ]
  }
}