{ "schema": "phishdestroy.reading-edition.v2", "schema_url": "https://phishdestroy.io/steam_dossier/exports/reading-2026-10-18/article.schema.json", "object_type": "Dated article reading edition with PDF digest", "id": "support_canned_refusals", "language": "en", "title": "Steam Support: Replies, Recovery & Refusals — The Steam Dossier", "author": "PhishDestroy Team", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals", "source_file": "steam_dossier/support_canned_refusals.html", "source_html_sha256": "d8235dfde38e13bf59e853770320cf709eb047478744c7647c584fbc6a792332", "exported_at": "2026-10-18T11:58:30.589Z", "edition_date": "2026-10-18", "scope": { "text": "Authored discussion and analytical tables from the current source HTML. Interactive controls and navigation are omitted; interactive datasets remain linked.", "omissions": [], "evidence_status": "The signature authenticates this publication, not the truth or authenticity of third-party evidence." }, "pdf": { "filename": "support_canned_refusals.pdf", "url": "https://phishdestroy.io/steam_dossier/exports/reading-2026-10-18/en/support_canned_refusals.pdf", "sha256": "a431d12484f5eadcc782921ad7772a3aef3b410680e6b1664a25c80817c76f56", "bytes": 1913898, "pages": 13 }, "integrity": { "signed_object": "support_canned_refusals.content.json", "signature_url": "https://phishdestroy.io/steam_dossier/exports/reading-2026-10-18/en/support_canned_refusals.content.json.asc", "checksum_url": "https://phishdestroy.io/steam_dossier/exports/reading-2026-10-18/en/support_canned_refusals.content.json.sha256", "format": "ASCII-armored detached OpenPGP", "signing_key_fingerprint": "129FC7F39C40C69D2EF3C329BFCF9E8DD295EE01", "public_key": "https://phishdestroy.io/.well-known/pgp-key.txt", "scope": "Exact UTF-8 JSON bytes, including content and the PDF SHA-256. No cryptographic PDF document signature is asserted." }, "license": { "identifier": "CC0-1.0", "application": "Authored material only; third-party material retains its own rights.", "rights_statement_url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/license-rights.json", "rights_statement_sha256": "80d67354f8e5efd65b03696be950fb0f95c188d0089b1604281d0a4daff3f4cb" }, "content": { "text": "Contents · Live article\n\nEvidence file S-01 / Steam Support\nUpdated 18 October 2026\nAfter the loss. Read the reply.\n\nRecovery decisions, restoration refusals and closed requests. Put the support wording beside the reported outcome, then follow it back to the source.\n\n9,051\n\ncollected rows · 17 October 2026\n\n2,961\nTier A\nresponse material\n6,090\nTier B\nincident reports\n\nThe collector’s tiers describe the material supplied. Rows are not unique victims or independently authenticated tickets.\n\n01 / A new entry in the recovery record\nThe authenticator was removed. The request was disputed.\n\nA ticket image published on 13 October 2026 adds a concrete sequence to the dossier’s question: who can reset the safeguards, and what evidence do they accept?\n\nThe published exchange first asks for a registered CD key. After the requester says they did not retain one, a support reply says ownership has been verified and the authenticator removed.\n\n“I've removed the authenticator from your account.”\n\nA later message challenges the request: This request was not made by me, my login was hacked. It asks support not to change the email address and to explain how a third party could remove two-factor authentication.\n\nPublished account & ticket ↗\nRead the support-access investigation →\nPublished ticket image. Account, payment and staff identifiers were already covered in the supplied image. The full image preserves those redactions.\n29 Sep · 2:43pm\nRemoval requested\n\nThe requester describes a changed phone and a missing recovery code.\n\n29 Sep · 6:27pm\nA CD key is requested\n\nSupport asks for the registered key and an image of it.\n\n30 Sep · 6:50am\nAuthenticator removed\n\nAfter a reassessment, support says ownership was verified.\n\n30 Sep · 12:24pm\nThe request is challenged\n\nA later message says the request was unauthorized.\n\nThe poster identifies the first requester as an attacker. The image records the exchange, but does not authenticate the participants or reveal checks performed outside it. It does not establish staff complicity or a completed inventory theft. A related cross-post is also present in Tier B; it is not an additional victim. Times above are those shown in the image, with no timezone specified.\n\n02 / The response and its limits\nWhat the reply actually records.\n\nSix ticket images have been read for these selected examples. Each full capture remains available. Their wording supports specific observations; the surrounding allegations need their own evidence.\n\nPublished ticket image. The preview isolates the support reply. The full capture also includes the player's request.\nDota 2 · published 14 July 2020\nA reported theft. An economic reason for refusal.\n\nThe player reports losing items after changing their password and following support guidance. The reply acknowledges removal without permission, refuses restoration, and invokes duplication, scarcity and the item economy.\n\n“Steam Support does not restore scammed, lost, or stolen items for any reason.”\n\nThis is a published reply image. It does not establish the attack vector, the inventory value, or whether the account-security advice was followed successfully.\n\nRead the source publication ↗\nPublished ticket image. The preview crops the Steam desktop frame. The full capture is available for context.\nCS:GO · capture displays 23 April 2020\nThe substituted trade is described in the reply.\n\nSupport describes a compromiser observing and cancelling a trade offer, copying the intended partner's profile and sending a replacement offer. The same exchange refuses item restoration.\n\n“Unfortunately, we do not restore items in accordance with Steam's Item Restoration Policy.”\n\nThe visible account describes trade substitution. This image alone does not prove that an API key, rather than another form of account access, enabled it. The date comes from the capture, not a verified publication timestamp.\n\nRead the source publication ↗\nPublished ticket image. The full image includes the reply and the closed-request notice.\nCommunity Market · published 21 January 2025\nUnauthorized use acknowledged. The request closed.\n\nA reply dated 20 January acknowledges that the account was used without permission, says Market activity cannot be reversed, directs the user to report through the Community, and announces closure of the request. A closed-request notice is visible below it.\n\n“Since there's not much more that I can say or do to be of help with this particular issue, I am going to close this help request.”\n\nThe image supports the wording and closure shown. It does not establish the value lost or the mechanism of unauthorized access. This Market reply predates the current CS2 Trade Protection system.\n\nRead the source publication ↗\nPublished ticket image. The complete supplied reply is shown.\nMarket enforcement · published 8 September 2025\nItems removed. The account unlocked with a warning.\n\nThe reply alleges that inflated-price sales involved fraudulent funds. It records the removal of items, games and Wallet funds, refuses their restoration, and says the account has been unlocked with a final warning.\n\n“We have removed items and games added to the account since these transactions as well as any remaining fraudulent wallet funds.”\n\nThis is a recorded enforcement action and a partial resolution, not evidence that the fraud allegation was correct. It should not be counted as a simple refusal to help.\n\nRead the source publication ↗\nRepeated restoration wording\n“does not restore scammed, lost, or stolen items”\n\n22 Tier A report rows · 18 source groups, including one local reference without a public URL\n\nInspect the matching rows →\nRepeated closure wording\n“I am going to close this help request”\n\n6 Tier A report rows · 6 normalized source URLs\n\nInspect the matching rows →\n\nThese are literal phrase matches in the collected support-text field, after normalizing whitespace and case. Policy pages, login text and search snippets are excluded from these counts. Repeated wording establishes reuse of language; it does not by itself establish that a bot handled a request.\n\n03 / Keep the differences in the record\nRestoration, deletion and reversal are different decisions.\n\nThe collection includes positive outcomes and statements of discretion. Counting every row as a refusal would erase that evidence.\n\nTeam Fortress 2 · reply displays 2 September\nDeleted items: a reply describes discretion.\n“We consider item restorations requests on a case-by-case basis”\n\nIn response to a question about deleted items, support describes case-by-case consideration and a typical 14-day window. The reply says support cannot explain the reason for the policy.\n\nThis concerns deleted items, not items transferred to another account. It is a statement about possible consideration, not proof that this player received a restoration. The supplied record does not establish the year.\n\nSource publication ↗\nInspect the full image ↗\nSelected detail. The full image and its source remain linked above.\nCS:GO · published 29 September 2015\nThe collection also records a restoration.\n“We have made an exception to our item restoration policy in this case”\n\nThe poster reports that a VAC ban was removed and items returned after an account compromise. The text quotes a support reply describing an exception to the restoration policy and reversal of actions taken during the compromise.\n\nThis is a quotation in a public post, not a ticket image inspected here. It describes a historical exception and does not establish a current entitlement or the frequency of restorations.\n\nSource publication ↗\nRead older replies against the current product.\n\nSteam’s item-restoration policy and its Trade Protection rules cover different mechanisms. The latter currently provides a seven-day reversal window for eligible CS2 trades. It should not be generalized to Community Market transactions, TF2 deleted items, every game, or older screenshots. See the dossier’s comparison of protection across three games →\n\n04 / Source register\nSearch the collection. Open the source.\n\nStart with Tier A report rows, or switch to Tier B and the policy material. Grouping combines repeated source URLs without pretending they are independent cases.\n\nTitles, summaries, tags and transcriptions are collection material. The selected readings above have an additional editorial note. The default view separates policy pages and obvious non-case material from report rows.\n\nSearch all 9,051 collection rows, inspect source groups and download filtered records online.\n\n05 / Count what was supplied\nA collection of records. Not a count of victims.\n\nCollection dated 17 October 2026; integrated and counted on 18 October. The original archive is preserved with a SHA-256 fingerprint. Public reading files omit private contact details and credentials where detected.\n\nTier A: 2,961 rows. The collector labels 2,375 as quoted text, 571 as screenshot material and 15 as template matches. Of these rows, 2,935 contain non-empty support text. These labels do not authenticate the reply or prove the accompanying allegation.\n\nTier B: 6,090 rows. Reports and other incident material that did not qualify for the collector’s Tier A. A user’s description is not a quotation or admission by Valve.\n\n8,252 distinct supplied source references; 7,965 normalized source groups across A+B. Grouping resolves relative Reddit links, removes tracking and language variants and normalizes thread URLs. Different URLs may still describe the same event.\n9,030 rows have a public source URL. We resolved 44 relative Reddit paths. The other 21 rows cite local collection files and are explicitly marked as lacking a public source link; their paths are not published. These local references remain separate groups.\n641 distinct image files were supplied. Six selected ticket images are reproduced here; other records retain links to their original publications.\n223 policy-context rows, 20 login-page rows and 2 search-result rows are retained as context, outside the default report view. This is a limited source-type check, not a claim that every remaining row is relevant or verified.\n5,727 Tier L leads are separate. They do not contribute to the 9,051-row total or the phrase counts. Reverse-image matches and search leads require verification and can repeat a single image.\nDates are not interchangeable. Register dates use valid supplied publication timestamps. A screenshot’s visible date or a ban expiry, including 2038 dates, is not silently treated as an incident date.\nWhy these counts differ from the supplied inventory\n\nThe delivered Tier A files contain 2,619 distinct values in the source field and 2,440 distinct non-empty support-text values. Its HTML exhibit file references 539 distinct image paths. The inventory text lists lower totals for these measures. Source fields include both web addresses and local references. This page uses counts recomputed from the delivered files, keeps their definitions explicit, and does not use either set as a count of independent cases.\n\nOriginal collection tags · row counts, including context\nTopic\tTier A\tTier B\nItem restoration\t860\t544\nBan disputes\t834\t609\nAccount recovery\t507\t724\nReported theft\t378\t3,158\nClosed or unanswered requests\t266\t755\nTransaction reversals\t79\t29\nAPI-key complaints\t22\t220\nAuthenticator removal\t15\t51\nTotal\t2,961\t6,090\n\nThe tags are inherited from the collector. For example, a restoration tag can contain a policy page or an exception. Read the source and the selected annotations before drawing a conclusion.\n\nTake the record with you.\nAll A+B rows · CSV ↓Reading dataset · JSON ↓Counts & file hashes ↗Tier L research leads · CSV ↓\n\nThe exports preserve source IDs, links, collector tiers and tags. They contain the public reading fields, not an unredacted copy of every scraped page. The earlier 1,505-row support collection remains available as a separate historical file; the two totals are not added together.\n\nOriginal archive SHA-256\n54ae8632e3336df320b13cf5e8a09d50f428681563fdb15c810b8dd569b79b59", "headings": [ { "level": 1, "text": "After the loss. Read the reply.", "anchor": "pd-support_canned_refusals--support-title", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#support-title" }, { "level": 2, "text": "The authenticator was removed. The request was disputed.", "anchor": "pd-support_canned_refusals--recovery-heading", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#recovery-heading" }, { "level": 2, "text": "What the reply actually records.", "anchor": "pd-support_canned_refusals--replies-heading", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#replies-heading" }, { "level": 3, "text": "A reported theft. An economic reason for refusal.", "anchor": "pd-support_canned_refusals--heading-4", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#restoration-policy-reply" }, { "level": 3, "text": "The substituted trade is described in the reply.", "anchor": "pd-support_canned_refusals--heading-5", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#trade-substitution-reply" }, { "level": 3, "text": "Unauthorized use acknowledged. The request closed.", "anchor": "pd-support_canned_refusals--heading-6", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#market-request-closed" }, { "level": 3, "text": "Items removed. The account unlocked with a warning.", "anchor": "pd-support_canned_refusals--heading-7", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#market-removal-and-unlock" }, { "level": 2, "text": "Restoration, deletion and reversal are different decisions.", "anchor": "pd-support_canned_refusals--exceptions-heading", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#exceptions-heading" }, { "level": 3, "text": "Deleted items: a reply describes discretion.", "anchor": "pd-support_canned_refusals--heading-9", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#deleted-item-exception" }, { "level": 3, "text": "The collection also records a restoration.", "anchor": "pd-support_canned_refusals--heading-10", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#historical-restoration-exception" }, { "level": 2, "text": "Search the collection. Open the source.", "anchor": "pd-support_canned_refusals--register-heading", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#register-heading" }, { "level": 2, "text": "A collection of records. Not a count of victims.", "anchor": "pd-support_canned_refusals--method-heading", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#method-heading" }, { "level": 3, "text": "Take the record with you.", "anchor": "pd-support_canned_refusals--heading-13", "source_url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#collection-downloads" } ], "links": [ { "label": "Live article", "url": "https://phishdestroy.io/steam_dossier/support_canned_refusals" }, { "label": "Published account & ticket ↗", "url": "https://www.reddit.com/r/SteamScams/comments/1x4vyuk/" }, { "label": "Read the support-access investigation →", "url": "https://phishdestroy.io/steam_dossier/#insider-threat" }, { "label": "", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/images/recovery-2026.png" }, { "label": "related cross-post", "url": "https://www.reddit.com/r/SteamScams/comments/1x4bm11/" }, { "label": "", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/images/restoration-policy-reply.png" }, { "label": "Read the source publication ↗", "url": "https://www.reddit.com/r/DotA2/comments/hr5csj/" }, { "label": "", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/images/trade-substitution-reply.png" }, { "label": "Read the source publication ↗", "url": "https://www.reddit.com/r/csgo/comments/g6detw/sometimes_in_life_a_bystander_is_no_less_than_a/" }, { "label": "", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/images/market-request-closed.png" }, { "label": "Read the source publication ↗", "url": "https://www.reddit.com/r/steamsupport/comments/1i6dsqy/" }, { "label": "", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/images/market-removal-and-unlock.png" }, { "label": "Read the source publication ↗", "url": "https://www.reddit.com/r/steamsupport/comments/1nb9vig/" }, { "label": "Inspect the matching rows →", "url": "https://phishdestroy.io/steam_dossier/support_canned_refusals.html?phrase=restoration#support-browser" }, { "label": "Inspect the matching rows →", "url": "https://phishdestroy.io/steam_dossier/support_canned_refusals.html?phrase=closure#support-browser" }, { "label": "Source publication ↗", "url": "https://www.reddit.com/r/tf2/comments/167wf9h/steam_support_do_actually_restore_deleted_items/" }, { "label": "Inspect the full image ↗", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/images/deleted-item-exception.png" }, { "label": "Source publication ↗", "url": "https://www.reddit.com/r/GlobalOffensive/comments/3mtm0u/" }, { "label": "item-restoration policy", "url": "https://help.steampowered.com/en/faqs/view/3B6E-B322-2400-8D24" }, { "label": "Trade Protection rules", "url": "https://help.steampowered.com/en/faqs/view/365F-4BEE-2AE2-7BDD" }, { "label": "comparison of protection across three games →", "url": "https://phishdestroy.io/steam_dossier/three-games-and-security.html" }, { "label": "Search all 9,051 collection rows, inspect source groups and download filtered records online.", "url": "https://phishdestroy.io/steam_dossier/support_canned_refusals#support-browser" }, { "label": "All A+B rows · CSV ↓", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/records.csv" }, { "label": "Reading dataset · JSON ↓", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/records.json" }, { "label": "Counts & file hashes ↗", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/manifest.json" }, { "label": "Tier L research leads · CSV ↓", "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/leads.csv" }, { "label": "1,505-row support collection", "url": "https://phishdestroy.io/steam_dossier/VALVE_EVIDENCE_PACK/support_tickets_archive/MASTER_SUPPORT_EVIDENCE_DATABASE.json" } ], "tables": [ { "id": "table-1", "caption": "Original collection tags · row counts, including context", "rows": [ [ "Topic", "Tier A", "Tier B" ], [ "Item restoration", "860", "544" ], [ "Ban disputes", "834", "609" ], [ "Account recovery", "507", "724" ], [ "Reported theft", "378", "3,158" ], [ "Closed or unanswered requests", "266", "755" ], [ "Transaction reversals", "79", "29" ], [ "API-key complaints", "22", "220" ], [ "Authenticator removal", "15", "51" ], [ "Total", "2,961", "6,090" ] ] } ], "cited_source_ids": [] }, "resources": [ { "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/records.csv", "sha256": "8db58702ed9d463fb3196cd76caa5b35318a72d39dc4d1544e4d1988983b4c20", "bytes": 5319240 }, { "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/records.json", "sha256": "a91b25a12a8a40278e82204221b3de2c6820bffdff64cc7dd623634946c34904", "bytes": 8123062 }, { "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/manifest.json", "sha256": "0796b32a9c2355d0edfc3070667b01632398b77e3205e934469066e87935f5fd", "bytes": 10177 }, { "url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/support-collection-2026-10-17/leads.csv", "sha256": "c8bd0968a3d11c827897ca13f0b3a81ac1080fc8a305b1ab185db04a78f5dffe", "bytes": 1345764 }, { "url": "https://phishdestroy.io/steam_dossier/VALVE_EVIDENCE_PACK/support_tickets_archive/MASTER_SUPPORT_EVIDENCE_DATABASE.json", "sha256": "12fbd93a80df0addfeb187f276206c580366bbf1abeda4168535cdae752ea7f9", "bytes": 720795 } ] }