Skip to investigation
PHISHDESTROY / STEAM DOSSIERValve & enforcement
VALVE / THE PUBLIC DEFENCE & THE ENFORCEMENT RECORD OWNERSHIP, GAMBLING & PLATFORM CONTROL10 OCT 2026 • WORKING PAPER

THE COMPANY. THE CLAIM. THE RECORD.

Their defence.
Their control.

Valve invokes the rights of collectors. Its own system keeps the power over them.

Valve’s response to New York asks readers to accept a familiar picture: physical collectibles, consumer choice and privacy. The agreement, restriction policies and disclosure record show what that picture leaves out. This article puts eight claims beside the documents and follows the consequences for ownership, enforcement and access to evidence.

THE COMPARISON AT THE CENTRE OF THE CASE↗
A PHYSICAL COLLECTION

The purchaser keeps the object.

A knife, card or toy can remain in the owner’s possession and change hands without the original seller operating an account or approving the transfer.

A STEAM ITEM

No ownership interest.

Steam records the item and controls its transfer. The agreement denies an ownership interest in marketplace subscriptions and reserves the ability to change or discontinue the market.

The familiar act of collecting conceals a different allocation of power.

i

The comparison fails on control, not on collecting. People do collect skins and pay real prices for them — and the company that records each item, executes every transfer and can lock the account still holds powers no physical maker possesses.

THE CASE IN FOUR POWERS

Follow what Valve controls.

Choose the power. Inspect the mechanism. Continue to the underlying evidence.

CONTROL ATLAS / DOCUMENTED RELATIONSHIPSFour ways into the investigation
THE OWNERSHIP CLAIM / THE CONTRACT

Collecting does not transfer control of the system.

The holder receives licence rights while Valve retains control of account access and onward transfer. The next purchaser enters the same administered relationship.

NEW CASE FILE / THREE GAMES, CONCRETE PRECEDENTSValve can freeze, trace, restore and change the market.TF2’s 2019 remedy · the key restriction · the Canadian order · victim reports · farm economics ↗
01

THE US CASE / THE PUBLIC ANSWER

Valve’s answer to New York:
the ownership lie and its framing

New York’s complaint concerns paid chances to receive items with exchange value. Valve’s public answer compares that experience with familiar physical collectibles. The comparison matters because it carries an assumption beyond the act of opening a box: that the customer acquires an object they can possess and dispose of as an owner.

FILED 25 FEBRUARY 2026450952/2026

The People of the State of New York
v. Valve Corporation

Filed by
Letitia James, New York Attorney General
Court
Supreme Court of the State of New York, New York County
Record
NYSCEF document 2 · 52-page complaint
Games examined
Counter-Strike 2 · Team Fortress 2 · Dota 2

THE ALLEGED MECHANISM

The complaint targets paid random outcomes

The Attorney General alleges that Valve sells access to random item outcomes with monetary value. The announcement describes a slot-machine-style opening animation and cites a skin reportedly sold for more than $1 million. It identifies both Steam’s market and outside cash marketplaces as routes for realising value.

This is the economic transaction our investigation follows: the payment, the random result, the exchange route and the party controlling each stage.

THE RELIEF REQUESTED

The state seeks an injunction and financial remedies

The civil complaint invokes Executive Law §63(12), the state Constitution and gambling provisions of the Penal Law. It requests an injunction, an accounting of consumer losses, restitution and damages, disgorgement, and a fine of three times the gains alleged to arise from the conduct.

Read the requested relief · PDF pp. 50–51 ↗

A / THE COMPLAINT’S OWN WORDS / FILED 25 FEBRUARY 2026

“the process resembles a slot machine, with an animated spinning wheel that eventually rests on a selected item.”

“quintessential gambling”

E38 · Filed complaint ↗

B / THE STATE’S WORDS, NOT AN ACTIVIST’S

When the regulator’s own filing names the machine, the collectibles analogy is answering a different document.

The complaint does not hedge: it calls the mechanism “quintessential gambling” and describes the animated spinning wheel in its own words. That language belongs to the Attorney General’s filing, not to an advocacy campaign — and the baseball-card comparison is an answer addressed to the document the state actually wrote. The analogy beside the record ↗

VALVE’S PUBLIC RESPONSE / 11 MARCH 2026Read the original ↗

Valve compares its boxes with baseball cards, Pokémon, Magic: The Gathering and Labubu. It also defends the ability to transfer digital items by invoking the rights of people who own physical collectibles. The statement presents the activity through familiar acts of buying, collecting and reselling.

It further relies on optional participation, cosmetic effects, account enforcement and objections to additional personal-data collection. This is Valve’s corporate response; the separate evidence of Gabe Newell’s physical collection appears in the next chapter.

LIES & MANIPULATION / THE STATEMENT EXAMINED

The ownership lie and the arguments used to sustain it

The central deception is the equivalence between a physical owner and the holder of a licence controlled by Valve. The statement reinforces that picture by shifting attention to gameplay, non-paying players, aggregate enforcement and future law. Below, each red excerpt or labelled summary is followed by the contradiction or manipulation it contains and the evidence for that finding.

01VALVE’S STATEMENT · EXACT EXCERPT
“in the same way an owner”

Valve compares the transfer of a digital item with an owner selling or trading a physical collectible.

THE OWNERSHIP LIE

The comparison presents a controlled licence as equivalent to physical ownership.

Steam’s agreement gives the account holder licence rights and expressly denies an ownership interest in marketplace subscriptions. Valve records the item, executes transfers and can restrict the account that holds it. A purchaser of a physical knife, card or Labubu figure does not need the original seller’s continuing permission to retain the object. The falsehood is the equivalence: the analogy imports the independence of a physical owner into a relationship still administered by the issuer.

02VALVE’S STATEMENT · POSITION SUMMARISED

Valve presents continued item transferability as a consumer right it will defend.

MANIPULATION / OWNERSHIP LANGUAGE

The power to grant a transfer remains the power to refuse it.

Valve’s public defence foregrounds the user’s ability to transfer an item. Its contract preserves the company’s authority over the marketplace, and account restrictions can prevent the holder from moving the skin. Presenting a platform-administered permission through the language of an owner’s rights conceals the condition that matters when a dispute begins. The manufacturer of Newell’s physical knives has no equivalent account switch over his collection.

03VALVE’S STATEMENT · EXACT EXCERPT
“purely cosmetic”

Valve argues that a player who does not buy items suffers no gameplay disadvantage.

MANIPULATION / ERASING THE COMMERCIAL ROLE

The look is the product. The Major stage makes it visible.

PhishDestroy’s seven-Major dataset records 948,232 skinned weapon-inspect events out of 960,770. Of 559 player–Major records, 557 include a skinned weapon inspect; only two contain default-only inspect records. The analysis covers 491 maps from the final-16 stage through the finals, across 2021–2025. It gives the cosmetic argument a concrete commercial setting: elite Counter-Strike is played with the very appearances the economy sells.

An inspect input—commonly bound to F—brings the weapon into view without improving its damage. That is precisely the point: appearance can be the attraction. Valve linked in-game item sales to Major prize funding as early as 2013. Calling the items cosmetic leaves both their exchange value and their place in the tournament economy unexplained. The inspect dataset measures recorded use; the exposure those Majors deliver — and the purchases that follow it — sit in telemetry Valve already holds and has never published.

The complaint expressly describes items without gameplay effects; the response substitutes an easier question for the economic mechanism being challenged — what the user pays, how the outcome is selected and what the item can be sold for.

04VALVE’S STATEMENT · EXACT EXCERPT
“most of you don't open any boxes”

Valve invokes the wider population of players who do not participate in paid openings.

MANIPULATION / CHANGING THE DENOMINATOR

Not opening a case does not put a player outside the skin economy.

The complaint concerns the transaction offered to people who pay for random outcomes. Counting everyone who plays without paying does not answer it. A player can acquire a skin through a market or trade, follow a professional’s loadout, or want an appearance they cannot afford without opening a box. Valve supplies no participation breakdown in this passage.

The sharper question is what happens when appearance is separated from a purchased inventory item. Valve’s server rules prohibit simulated unowned skins even when only the player can see them. Touch Skins later announced closure after a demand from Valve’s representatives in Russia. The company actively protects access to cosmetic appearance; its public answer should explain that economic boundary.

05VALVE’S STATEMENT · EXACT EXCERPT
“Valve does not cooperate with gambling sites.”

Valve distances itself from outside operators when describing its response to skin gambling.

MANIPULATION / A SELECTIVE BOUNDARY

The sponsorship claim needs a date, a category and an enforcement record.

The same response says gambling-related businesses are forbidden from participating in or sponsoring tournaments. Published Valve rules distinguish licensed betting from skin-economy sponsors. Organisers’ own announcements identify GG.BET at Stockholm and Antwerp, Unikrn at Paris, and 1xBet at Copenhagen. A blanket public claim cannot substitute for those dated arrangements.

The infrastructure question also remains. Steam identification, session credentials and item transfers feed outside operators’ verification and ledgers. That technical dependence is documented; whether any private arrangement exists is a question for Valve’s own records, not a defence its statement can rely on. Which businesses lost access, under which rule, and what changed after the 2016 demands?

06VALVE’S STATEMENT · POSITION SUMMARISED

Valve cites more than one million account locks across gambling, fraud and theft.

MANIPULATION / SUBSTITUTING THE METRIC

A million account locks do not identify a million bots—or closed businesses.

Valve combines gambling, fraud and theft in one account total. It does not publish the division between automated accounts, ordinary P2P participants, compromised users and operator-controlled inventories. CSGOEmpire dates its move from Steam bots to P2P to 2018; CSGOFast describes direct player-to-player skin sales today. That changes where the items sit and who bears a restriction.

In this model, a listed skin can belong to a participant while the operator controls the balance and settlement. Locking that Steam account can immobilise the participant’s inventory while leaving the service’s website, funding routes and ledger functioning. The missing result is not another large total: it is a classification of the accounts, the losses and the businesses actually stopped.

07VALVE’S STATEMENT · POSITION SUMMARISED

Valve presents additional location and age checks as an intrusion into users’ privacy.

MANIPULATION / SELECTIVE PRIVACY

Valve already collects the signals and operates the regional controls.

Its privacy policy lists IP records and unique device identifiers. Its product history shows country-specific container rules, including the Netherlands’ move to X-Ray Scanner in March 2026. The response must identify the additional data it considers necessary and explain why existing controls cannot meet the proposed purpose.

Payment-method checks also leave the age of the person spending a gifted or previously funded Wallet unanswered. And a privacy claim must be tested against Valve’s own disclosure record: retained information, failed redactions and requests closed without the requested records.

The same scrutiny applies to protection. Trade Protection does not answer the documented Market-to-Wallet-to-gift route, or supply the evidence and review process for a disputed payment restriction.

08VALVE’S STATEMENT · EXACT EXCERPT
“legislature passes laws”

Valve promises compliance if New York adopts legislation governing mystery boxes.

MANIPULATION / MOVING THE LEGAL QUESTION

A promise about future legislation does not answer the case filed under existing law.

The Attorney General’s complaint invokes existing New York provisions and alleges that Valve’s current mechanism violates them. Valve’s promise concerns a different event: legislation that might be adopted later. The dispute before the court concerns the application of existing law to the conduct alleged. Framing the issue around a future law moves attention away from the claim actually filed.

Read the contemporaneous coverage supplied with this investigation+
ORIGINAL PHISHDESTROY RESEARCH / MAJOR SKINSInspect the original Major skins dataset.Open the full analysis, event comparisons and methodology on PhishDestroy ↗
02

THE LABUBU DEFENCE

What the collector owns,
and what Valve controls

Valve’s analogy asks readers to picture an object that remains theirs after purchase. Steam’s agreement describes a licence administered by the company that records the item, executes its transfer and can restrict the account holding it. This is the difference that matters when access is disputed, a trade is refused or the platform changes its rules.

Labubu becomes a mass collecting phenomenon.

The popularity that made the brand a household name dates to 2024; the IP’s owner reports the revenue scale for that year and the surge that followed.

The CS2 Armory Update introduces weapon charms.

Valve’s release notes announce the Armory and charms — keychains for weapons — placing another paid cosmetic product inside Valve’s monetisation architecture, in the middle of the collecting boom.

Valve’s answer to New York invokes Labubu.

The statement names Labubu among the physical collectibles its boxes are compared with. The analogy borrows a 2024 collecting boom to answer a 2026 gambling complaint.

Follow the full chronology ↗

The difference is also commercial. In an ordinary direct resale of a physical collectible, the original maker does not execute the handover or receive another payment merely because it changes hands. Valve continues to operate the Steam Community Market and reserves transaction fees. New York’s complaint identifies paid openings and Steam Market commissions as revenue sources. That continuing role distinguishes the digital system from a maker whose involvement ends with the original sale. Which transactions Valve’s fee claim reaches — the paid openings, the Market commissions, the outside settlement routes — is a boundary Valve’s statement should draw explicitly.

≈ 15%Combined fee on a Steam Community Market transaction — the game fee plus the Steam fee
≈ $1,800Listing ceiling on the venue Valve operates, with 248 CS2 categories trading above it
$10,941Starting Factory New Dragon Lore price across five independent marketplaces, 23 September 2026 snapshot

That is the number the analogy omits. A Steam Community Market transaction carries a combined fee of roughly 15% — the game fee plus the Steam fee — on a venue whose listings are capped near $1,800. Valve mints the random outcome, sells the chance, operates the resale venue and takes a cut of every monetisation inside it; no baseball-card publisher holds all four roles at once. Inspect the dated price record ↗

The four roles behind the fee
Role in the transactionA blind-box maker
Baseball cards · Pokémon · Labubu
Valve inside Steam
Issuer and operator
Mints the random outcomeThe contents are sealed at the factory.Case contents are generated by Valve.
Sells the chanceThe pack carries a fixed price.Case and key are priced by Valve.
Operates the resale venueResale happens outside the maker’s systems.Valve operates the Steam Community Market.
Collects a fee when the outcome is monetisedNo share of a resale reaches the maker.A combined fee of roughly 15% per Market transaction.

THE CONTRACTUAL DIFFERENCESection 3.D expressly applies the licence model to items acquired from other users. Resale does not release the item from Valve’s system: the next holder enters the same administered relationship.

What the physical-collectible analogy leaves out
RelationshipAn ordinary direct resale
A physical card or toy
A Steam item transfer
Inside Valve’s system
After the first purchaseThe buyer holds a physical object that can be handed to someone else.The user holds transferable licence rights governed by Steam’s agreement.
The original maker’s roleA direct handover does not require the manufacturer to run or approve the exchange.Valve operates the market and the infrastructure that records the transfer.
An account is restrictedThe maker’s decision about an online account does not physically remove the card or toy from its holder.The operator can disable the account permissions needed to move the digital item.
What the seller receivesThe payment agreed between the people making that direct sale.On Steam’s Market: Wallet credit. In an outside platform transaction: the return defined by that platform’s settlement system.
THE FINDING

The comparison sells the feeling of ownership.
The platform retains the power to decide whether the item can move.

THE CLOSER COMPARISON / GABE NEWELL’S COLLECTION

Gabe Newell’s knives show what independent possession means

Newell has publicly described collecting knives since childhood. A maker’s account also records a display made for his collection. These sources establish a real physical collection against which Valve’s ownership analogy can be tested.

01 / NEWELL’S OWN ANSWER
“Since I was a kid.”

Asked when he started collecting knives, Newell gives that answer in Valve’s Reddit AMA. He also points readers to makers Kevin Cashen and Elizabeth Loerchner.

E26 · Open the exact answer ↗
02 / A WORK MADE FOR THE COLLECTION

A display made for his Warenski knife

On 24 May 2004, the display maker Wild Rose described a project for Newell involving a Buster Warenski folding knife engraved by Julie Warenski. The account describes the physical work and includes the display photograph.

E39 · Read the maker’s original post ↗

Newell’s continued possession of a physical knife does not require the original seller to keep a server running, renew a session or approve another owner. A dispute with the maker cannot be enforced by switching off the object. The same is true of an ordinarily purchased card or Labubu figure: the seller no longer administers the buyer’s possession. A Steam skin remains dependent on Valve’s account and transfer system throughout its life. That is why invoking physical ownership gives the reader a misleading picture of the digital relationship.

Apply the physical-collection analogy all the way through
The collector’s situationA physical knifeA Steam skin
Keeping the collectionThe object remains in the collector’s physical custody independently of the maker’s online account.Access and transfer depend on Steam’s account and item permissions.
A dispute with the makerAn account decision cannot remotely remove the knife from its holder.A trade restriction can immobilise the item inside the account.
Passing it on or leaving it to heirsThe physical object can be delivered to its next holder.Succession confronts a personal account, restricted account transfer and platform-controlled item transfers.
A high resale priceThe collector still holds a physical object.A quoted cash price does not change the platform’s licence grant or remove its power over access.
Recovery after theftRecovering the object restores physical possession.Account recovery, item restoration and trade reversal are separate processes controlled by the platform’s systems and rules.

THE WORD “ASSET” DOES NOT FIX THE RELATIONSHIP

A valuable item can still be held on someone else’s terms.

A high resale price does not remove this dependence. The agreement restricts account transfers, and item transfers still require Steam’s systems. Keeping a valuable skin, passing it to another person and recovering it after theft are therefore distinct permissions and procedures. Treating the item as an investment does not replace them with independent possession.

LOSS AND RECOVERY / WHO GETS A REMEDY?

The issuer controls the exception as well as the rule.

Steam’s restoration policy denies routine restoration of items that have left an account. Its trading FAQ gives scarcity and the effect of duplicate items on value as a reason. The platform therefore invokes the item economy when limiting a victim’s remedy.

The Steam Dossier places high-profile recoveries beside unresolved losses. The accountability question is concrete: what action was technically possible, who received it, which criterion governed it, and how could another affected user obtain the same review? A collector’s protection should not depend on obtaining exceptional attention.

Trade Protection, introduced in July 2025, returns the original items in eligible CS2 trades. That supplies a concrete remedy without creating a duplicate. The remaining question is the scope Valve chose: which losses qualify, which routes are excluded, and how an affected user can challenge a refusal. Inspect the Market and Wallet boundary ↗

THE RECOVERY PATTERN / WHO RECEIVES THE EXCEPTION?

The inventories that came back belong to names with reach.

Streamers, partners, people close to Valve. The silent majority’s stolen skins do not come back: the support trail ends in a canned refusal, and for an ordinary user a stolen skin is gone. Restoration is a favour, not a remedy — and the criterion is who you are.

THE OWNERSHIP CLAIM

The analogy describes the experience of collecting while concealing the conditions of possession. The seller’s original role continues as authority over the holder’s access.

RELATED ECONOMIC RECORDThe market above Steam’s listing ceilingInspect the dated prices and settlement system ↗
03

VALVE’S RULES / THE EXERCISE OF POWER

Account locks.
Show the enforcement record.

THE SAME DEFENCE, A DECADE APART

2016 → 2026

Valve’s October 2016 reply to the Washington State Gambling Commission and its March 2026 statement to players use the same structure: distance the company from outside gambling, defend useful transfer infrastructure, and report action through account restrictions.

Put the stated policy beside the mechanism
Component2016 / Washington2026 / New York
Distance from operatorsNo business relationship or revenue from the outside sites.No cooperation with gambling sites.
Infrastructure defendedTrading and OpenID benefit Steam users and game makers.Item transferability is defended as a consumer right.
Action reportedLetters to more than 40 sites and associated accounts disabled.More than one million accounts locked across gambling, fraud and theft.
Objection to interventionTurning off lawful services would affect legitimate uses.Removing transfers would take an existing ability away from users.
Who should define the legal boundary?Valve asks the Commission to identify the criminal law it says Valve violates.Valve promises compliance if the legislature adopts laws governing mystery boxes.
01 / VALVE COUNSEL TO THE WSGC / OCTOBER 2016
“…if there is a specific criminal statute or regulation you believe Valve is violating, please provide a citation.”

The Commission’s letter publicly threatened Valve with criminal prosecution for gambling on third-party sites. Valve’s counsel answered a criminal threat with a demand for a citation.

E19 · Valve counsel’s letter to the WSGC · 17 October 2016 ↗
02 / THE ARGUMENT VALVE ATTRIBUTED TO THE COMMISSION
“Valve could stop this, so it should”

That is the sentence that matters: capability, conceded by Valve itself in 2016. Its answer then and now is that turning off the service would burden lawful users. The capability has been admitted in writing for a decade; only the refusal has changed.

E19 · Valve counsel’s letter to the WSGC · 17 October 2016 ↗

A / ERIK JOHNSON / IN-GAME ITEM TRADING UPDATE / 13 JULY 2016

“We have no business relationships with any of these sites. We have never received any revenue from them. And Steam does not have a system for turning in-game items into real world currency.”

Quote it whole — ten years later every clause of it is testable.

E08 · Read the original statement ↗

B / EVERY CLAUSE, TEN YEARS LATER

Ten years later, every clause of it is testable against the record.

No business relationships, no revenue, no route to real-world currency: the sponsorship record, the fee record and the reported $1 million sale each date from the decade after 13 July 2016, and each turns a clause of the statement into a checkable claim. Inspect the fee record ↗ Inspect the sponsorship record ↗

The commercial ecosystem depends on the same account transfers that Valve presents as a consumer benefit. Keeping those transfers available preserves the infrastructure on which the outside services operate. The investigation follows that connection from the written prohibition to the functioning route.

THE MODEL CHANGED / THE METRIC DID NOT

2018 moved the trade.
Who now receives the ban?

Valve describes the gambling route and declares it prohibited.

Its public statement identifies OpenID and automated Steam accounts as the infrastructure used by outside sites. A decade later, the relevant outcome is whether operators can still coordinate delivery through Steam—not simply whether some accounts were disabled.

Valve imposes the seven-day trade cooldown.

Its announcement connects frequent item turnover to automated third-party accounts and applies a seven-day cooldown to received CS:GO trades. This is a dated change to the operating model.

2018 / OPERATOR’S ACCOUNT

Empire says it replaced Steam bots with P2P.

The operator’s current FAQ retrospectively dates its transition to 2018. Fast’s current market FAQ also describes direct sales between players. These records identify the P2P routes that account-level enforcement now has to address.

Valve reports account locks without an operator breakdown.

In a user-supplied inventory model, disabling the holder’s Steam account and disabling the coordinating business are different outcomes. The report must distinguish them.

THE ENFORCEMENT TEST

Follow the account, the inventory and the operator separately. Identify the transaction, ownership or control of the account, the commercial rule applied, the restriction’s scope, the loss, the appeal and the operator’s subsequent ability to settle trades.

What “bot”, $5 and an authenticator actually establish+

A bot describes automation. It does not identify the beneficial owner, whether an account was stolen, or whose assets it holds. Steam’s limited-account rules require $5 in qualifying spending for specified community features, including the Market and Web API. They do not classify Valve’s million locked accounts or establish a universal $5 cost for every game-item transfer.

Account-security rules depend on the route and date. The current CS2 Trade Protection FAQ describes immediate item delivery followed by a seven-day protection window, replacing the former hold/escrow route for CS2. Valve should classify the locked accounts and release their purchase and restriction histories so the financial effect can be reconciled.

THE FINANCIAL CONSEQUENCEThe user supplies the item. The operator controls the balance.Trace the ledger, restrictions and scarcity rationale ↗
VALVE’S MARCH 2026 STATEMENT1,000,000+Steam accounts locked in connection with gambling, fraud and theft

The total identifies locked accounts.
It does not identify who lost access.

Valve’s cited statement combines gambling, fraud and theft in one total. It does not classify those accounts as ordinary participants, custodial inventories, automated accounts or operators. In a direct-delivery marketplace, a participant’s own inventory supplies the skin, so the consequences of a restriction cannot be inferred from an account count alone.

When a restriction blocks trading and Market access, the holder loses the ability to send the item or realise its exchange value through those routes. Valve continues to control the record and the permission to move it. The practical loss falls on the account holder.

LOSS OF TRADING ACCESS

An immobilised inventory can lose its use as a source of exchange value. The holder remains dependent on the same platform for any restoration of trading access.

THE SECOND STANDARD

Commercial for the platform.
A violation for the user.

Steam’s Online Conduct rules put gambling under prohibited commercial activity. The Subscriber Agreement reserves commercial permissions, restricts account transfers and gives Valve enforcement powers. Those rules sit beside a public message presenting the ability to trade an item as a consumer right.

The investigation challenges the way this boundary is applied: the user supplies an item to a commercial system, the site controls valuation rules and the return, and an account restriction can leave the user with the loss. Calling the conduct “commercial” does not explain why the participant bears that consequence while the service coordinating it remains reachable.

TRANSLATE THE BAN NUMBER

The “bots” Valve locked were Steam users.

Their inventories were immobilised: value parked inside Valve’s system, unusable and unsellable, with no appeal and no stated reason. An immobilised inventory is not a neutral outcome — the issuer keeps the asset, the player loses the use, and the operator keeps the website. The number reports enforcement; the confiscation is the outcome.

Who now receives the ban ↗

THE SCOPE OF VALVE’S POWER

One allegation can reach every account.

Valve’s published restriction policy permits action against all accounts owned by an individual, including for prohibited commercial use. The decision record must identify the triggering transaction, every affected inventory and the basis for extending the restriction.

Separate the user’s loss from the operator’s outcome ↗

THE MISSING REMEDY

A reason must be something the user can challenge.

Steam’s own trading FAQ says most trade bans are permanent and that Support limits the information it supplies about ban and lock decisions. A label is not a case record. The user needs the transaction identified, the rule applied, the supporting evidence, the duration and scope of the restriction, and a route to a reasoned review. A closed support exchange leaves the item locked and the underlying decision outside the user’s control.

The Steam Dossier’s support and recovery records are the relevant evidence for this question: what was requested, what was refused, and who retained the power to restore access.

A locked user inventory.
A functioning commercial platform.
Show who the enforcement actually stops.

THE ACCOUNTABILITY TEST
04

TECHNICAL CAPABILITY / SUPPORT REFUSAL

The records exist.
Access is a decision.

A claim of technical inability must be tested against the operation being requested and the records Valve uses. The correspondence trail exposes a concrete accountability failure: retained device information, reported cross-account correlation and a closed request for the user’s own records belong to the same platform.

01 / CAPABILITY DESCRIBED

One device. Several accounts. Four years.

PhishDestroy’s memorandum attributes to paragraph 1.9 of Valve counsel’s 1 October 2025 letter a description of device correlation across accounts during 2019–2023. The reported operation is specific: associating account use with a device across multiple years.

Read the memorandum and attribution ↗
02 / RECORDS PRODUCED

An 830-page retained-data appendix.

The published audit records the structure and hash of the separate PDF appendix. It reports 986 masking rectangles over extractable text and 902,270 covered characters. The production itself demonstrates a substantial retained-record system.

03 / ACCESS CLOSED

A self-service link replaces the requested records.

Ticket HT-2YBP-F7JP-D4VB, filed on 16 September 2026, requested API-key, login, device and trade information. The preserved closure on 19 September redirects the requester to Account Data. The exchange does not supply the requested categories or give a legal basis for withholding them.

Inspect the dated ticket and screenshots ↗
THE ACCOUNTABILITY FAILURE

Valve holds the records and controls the route to them. Closing a request with a generic link leaves that control intact and the user without an inspectable answer to the specific request.

Evidence trail for the reported technical-impossibility contradiction+

The memorandum reports earlier Support statements about technical inability and sets them against counsel’s description of device correlation. The letter itself is not reproduced in the public dossier. Its attribution, date and paragraph number come from that memorandum; the appendix audit measures a separate document.

The exact earlier Support ticket asserting technical impossibility has not been located in the supplied materials or the inspected public archive text. The September 2026 ticket establishes a documented closure and referral to self-service. The earlier reply claiming technical inability is a record in Valve’s own support system; producing it is Valve’s task, not the requester’s.

05

THE PRIVACY ARGUMENT AGAINST THE RECORD

Privacy is invoked.
The records already exist.

Valve’s March 2026 response objects to demands for additional personal data and age verification. Our investigation puts that argument beside its existing record of client inspection, retained account data and device correlation. Privacy applies across that whole relationship.

2014

CLIENT-SIDE INSPECTION

DNS-cache checks were part of a documented VAC test.

Gabe Newell’s February 2014 account describes a historical anti-cheat check: after detecting specified cheats, VAC looked for matching cheat-server entries in the DNS cache and sent matching hashes for a server-side check. It is an example of device-level inspection already present in Valve’s technical history.

E22 · Newell’s original post ↗
2014

VAC / SIGNATURE DEPTH

The same client inspects process memory and loaded modules.

That is what an anti-cheat is: inspection of the running environment on the user’s machine, to signature depth. The 2014 DNS-cache build is one documented instance of that reach — a client that read users’ DNS caches and shipped hashes home. Client-side inspection is not a hypothetical Valve is being asked to start; it is a capability Valve has shipped for over a decade.

E22 · Newell’s original post ↗
2025

RETAINED DATA / DISCLOSURE

830 pages. 902,270 covered characters still extractable.

The dossier’s published audit examines the appendix supplied with the 1 October 2025 access response. It records black rectangles drawn over an intact text layer across all 830 pages. The redaction failure left the covered text recoverable, including third-party identifiers the masking was meant to withhold. The published aggregate audit records the scale without exposing those identifiers.

E21 · Open the audit and file hash ↗
2025

CROSS-ACCOUNT CORRELATION

One device, multiple accounts, retained across years.

The counsel correspondence recorded in the Steam Dossier describes a device used across dozens of accounts during 2019–2023. The memorandum sets this beside reported technical-inability replies from Support. The capability record above identifies the date, paragraph and source status of that contradiction.

Inspect the capability and source trail ↗
2026

ACCESS TO THOSE RECORDS

A specific request, closed with a self-service link.

The September ticket reproduced in the dossier requests API-key, login, device and trade records. The recorded closing response, three days later, redirects the requester to the Account Data page without supplying the requested records or stating a legal basis for that response. The categories requested and the response are preserved side by side.

Read the request and the closure ↗
THE QUESTION

What is collected, how long is it retained, who can correlate it, and what can the user inspect?
The privacy argument must address the existing system as well as proposed checks.

A Steam sign-in identifies an account. The age of the person using that account is a separate part of the access decision. The dossier follows that gap through the case-opening interface, existing Wallet balances and in-client messaging. Read the minors-protection section ↗

NEW / THE EXISTING SYSTEM UNDER SCRUTINYData collected. Rules enforced. Remedies demanded.Device and location signals · Netherlands 2026 · Wallet age gap · AmEx reports · Smirnov court record ↗
06

WHAT THE RECORD SHOWS

The defence omits
the power Valve retains.

Valve invokes ownership, transferability and privacy while administering the permissions, restrictions and records that determine what users can actually do. The complaint concerns that continuing power and the way it is exercised.

01 / OWNERSHIP

The analogy conceals the contract.

The user receives licence rights and remains dependent on the issuer for access and transfer. The physical-collection comparison leaves out that dependence.

The claim beside the agreement ↗
02 / ENFORCEMENT

An account total conceals the outcome.

A meaningful enforcement record identifies the rule applied, the operator’s route, the people restricted and the result. The aggregate account count supplies none of that classification.

The missing operator-level record ↗
03 / DISCLOSURE

Privacy must govern Valve’s own conduct.

The documented request and disclosure record belongs beside the public privacy argument: what was retained, what was released, and what the user was permitted to inspect.

The production and closure records ↗

THE RECORDS THAT WOULD ANSWER THE INVESTIGATION

Make the exercise of power inspectable.

  1. Operator enforcement: name the service, the restricted account or authentication route, the date, and whether access later returned.
  2. User consequences: account categories, immobilised inventory, notices, reasons supplied, review requests and their outcomes.
  3. Technical exclusion: a documented response to a gambling service’s declared openid.return_to or authentication host.
  4. Economic boundaries: the public policy governing outside cash settlement, cryptocurrency funding and commercial participation.
  5. The ownership comparison: identify the physical analogue in which the original maker retains equivalent power over possession and onward transfer.
  6. Remedy criteria: explain which recovery actions are available, who qualifies and how an ordinary user can obtain a review.
What records would change these findings?+

Each finding has a specific evidential test.

  • Operator enforcement: a dated record identifying a restricted operator and its authentication route would replace the present absence of that record for that service.
  • OpenID exclusion: a captured refusal tied to a gambling service’s declared return address would establish technical exclusion of that route at that time.
  • Ownership equivalence: a physical-collectible arrangement with equivalent continuing maker control over possession and transfer would need to be included in the comparison.
  • User remedies: documented review and recovery criteria, with ordinary-user outcomes, would allow the remedy assessment to be updated.

A new record changes the finding it addresses. It does not substitute an account total for an operator result, or a direct item transfer for an independently settled exchange.

THE FINDING

Collecting a skin does not give its holder the independence of a physical owner. Valve’s contract and the working transaction preserve authority that its public analogy leaves out.

THE AUTHOR’S CENTRAL QUESTION

Who benefits from circulation—and who pays when protection fails?

The investigation connects the personal loss of a Dota collection, CS2’s outside liquidity, the account access used by commercial extensions and the economics of farms. Valve’s role runs through that chain: issuer, platform operator, keeper of transaction records and designer of the protection and recovery rules.

Our criticism concerns the priorities of that system. Item circulation can create revenue while theft, cheating and restrictions leave the player carrying the loss. A public defence about cosmetics, privacy or a million locked accounts must answer that allocation of benefit, control and harm.

Personal collections and circulation ↗ · Architecture and corporate independence ↗ · Farm economics and enforcement ↗ · Reviews used to recruit trust ↗

THE INVESTIGATION / TWELVE CASE FILES

07

THE PUBLIC RECORD

Inspect the evidence.

Sources cited in this article appear first. Select “All records” to inspect the complete 107-record register shared by the investigation; the dedicated evidence files retain their own detailed registers.

E04WebAPI P2P SolutionCSGORoll / primary10 Apr 2024↗E08In-Game Item Trading UpdateValve / primary13 Jul 2016↗E09Steam Subscriber AgreementValve / primaryLive agreement↗E13The Steam Dossier — rules, routes and accountabilityPhishDestroy / contextRelated investigation↗E14About the New York Attorney General lawsuit against ValveValve / primary11 Mar 2026↗E15Steam Community Market FAQ — Wallet proceeds and market limitsValve / Steam Support / primaryLive FAQ · reviewed 10 Oct 2026↗E19October 2016 response to the Washington State Gambling CommissionValve / legal correspondence / primaryOctober 2016↗E21Disclosure audit — 830-page appendixPhishDestroy / exhibitPublished audit · reviewed 20 Sep 2026↗E27Steam Item Restoration PolicyValve / Steam Support / primaryLive policy↗E32Trade Protected ItemsValve / Steam Support / primaryLive FAQ · feature introduced July 2025↗E37Attorney General James announces the Valve lawsuitNew York Attorney General / primary25 Feb 2026↗E38People of New York v. Valve Corporation — filed complaintNew York Attorney General / NYSCEF / primary25 Feb 2026↗E41Steam Online Conduct — commercial activityValve / primaryLive rules↗E42Steam Trading — bans, explanations and restorationValve / Steam Support / primaryLive FAQ↗E50Seven-Major inspect totals — event CSVPhishDestroy / Major demo analysis / exhibitRetrieved 10 Oct 2026↗E51559 player–Major inspect records — CSVPhishDestroy / Major demo analysis / exhibitRetrieved 10 Oct 2026↗E52DreamHack 2013 — item sales and Major prize fundingValve / Counter-Strike / primary16 Sep 2013↗E53Limited Game Tournament License — §2.4(d)–(e)Valve / primaryCurrent text · reviewed 10 Oct 2026↗E54Commit 8594dc0 — tournament sponsorship requirementValveSoftware / GitHub / primary08 Dec 2025 · 23:03:20 UTC↗E55GG.BET / Antwerp 2022 and Stockholm 2021PGL / primary04 Apr 2022↗E56BLAST announces Unikrn partnership including Paris MajorBLAST / Cision / primary29 Mar 2023↗E571xBet / PGL Copenhagen Major 2024PGL / primary01 Feb 2024↗E60Game Server Operation Guidelines — cosmetic simulationValve / Counter-Strike / primaryJuly 2015 request / January 2016 action↗E61Project closure statementTouch Skins / primarySeptember 2026 episode · reviewed 10 Oct 2026↗E63Adjustments to maps and tradeValve / Counter-Strike / primary29 Mar 2018↗E64FAQ — Steam bots and the transition to P2PCSGOEmpire / primaryLive FAQ · reviewed 10 Oct 2026↗E65What is a market and how does it work?CSGOFast / primaryLive FAQ · reviewed 10 Oct 2026↗E66Limited User AccountsValve / Steam Support / primaryLive FAQ · reviewed 10 Oct 2026↗E71Steam Privacy Policy — existing collectionValve / primaryCurrent policy · §§3.1–3.8↗E77X-Ray Scanner for Germany and the NetherlandsValve / Counter-Strike 2 / primary16 Mar 2026↗E82Payment Disputes and ChargebacksValve / Steam Support / primaryCurrent policy · metadata 15 May 2024↗E87Restricted Steam Account — reasons and restriction typesValve / Steam Support / primaryCurrent policy · metadata 22 May 2025↗E101The Armory — announcement and release notesValve / Counter-Strike 2 / primary2 Oct 2024↗E111Annual Report 2025 — revenue by IPPOP MART / HKEX / primary21 Apr 2026 · 2024 and 2025 results↗
Methodology & source notes+

Research date: 10 October 2026. This chapter places Valve’s public response beside the filed New York complaint, Steam’s agreement, restriction policies and the dossier’s disclosure and recovery records. Source dates, quotations and attribution remain attached to each finding.

The transaction evidence continues in the gambling-system chapter. Credential comparisons, the supplied redacted JWT and dated Link Filter checks are retained in Steam access; version-pinned code findings are retained in the package audit.

Download source register ↓
AUTHOR / INVESTIGATION / EDITORIAL

Agent Elise

Published by PhishDestroy as part of The Steam Dossier.

Find this case in the dossier map →
Agent EliseFOLLOW THE EVIDENCE.
CONTINUE THE INVESTIGATIONThe gambling system

Direct item delivery and the operator’s control over value and settlement.

What this record supports

Source context

Open original record ↗
EXHIBIT A / ORIGINAL SUBMITTED CROP
Original submitted RWT warning screenshot

Undated, user-supplied image. Site origin was not independently verified.