In this episode of Private by Default, we share a real story about a young gamer who lost access to his Steam account after falling for a phishing scam. We break down how these scams work—using fake login links and social engineering to steal passwords and authentication codes—even when two-factor authentication is enabled.
You’ll hear about the real impact: lost games, stolen items, possible financial loss, and emotional stress. We use advice from CISA, Steam community guides, and cybersecurity experts to show you how these attacks happen and what red flags to watch for, like suspicious messages, fake websites, and urgent requests for personal info.
We cover the key steps to protect your account:
* Never click login links from messages or emails
* Always use Steam Guard two-factor authentication
* Check your email security
* Make your inventory private
* Watch for new, suspicious friend requests
If your account is compromised, we explain how to recover it—changing passwords, removing unauthorized devices, scanning for malware, and contacting Steam Support with proof of ownership.
Our main message: anyone can be targeted. Take five minutes to check your security settings and talk openly with your family about these risks. Building a habit of critical thinking and regular security checks can help keep your digital life safe.
🎧 Note: The podcast episode is generated by AI, based on a real world scenario and the research data used to create this podcast.
This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit privacytutor.substack.com
