mindblast: 1. That's hard. First of all, they can't know what trade it's illegal or not without seeing the actual trade on another site and connecting that seller on that site with the Steam account owner. Pretty much impossible. As i said, in their system appears as i would give you a card or a skin.
GabiMoro: But I'm not talking about Steam trade, I'm talking about Steam gifting, The gifting of something valuable is fishy, especially when the owner of the account reports he's been hijacked.The trade is made on another site or forum (Steam doesn't know about it), but after the deal and before he gets his money, the hacker must
gift the 100$ TF key. The first one who gets the free TF key is the hacker's account and the last one who get it for free is the person who bought it on the grey market.
If the TF key is traded after that (on Steam market) then all the persons who bought it are legit buyers.
How I see it:
1. Hacked account >>gift>> Account 1 (the hacker sold the item directly from the victim's acount, Account 1 is the person who bought on the grey market. The key should be removed, the owner is solely responsible for items bought outside Steam, he could take action against G2A or wherever he bought it from)
2. Hacked account >>gift>> Account 1 >>gift>> Account 2 (Account 1 is the hacker, Account 2 is the person who bought on the grey market.
3. Hacked account >>gift>> Account 1 >>gift>> Account 2 >>trade>> Account 3 (account 1 is the hacker, account 2 is the person who bought on the grey market. Account 3 is legit buyer.
There can be variations, but Steam could distinguish between hacker's account (no games, only tradable itmes, if any) and grey market buyer account.
That's where it does not work this way and i don't think that you understand to well how the Market works.
YOU CAN'T IMPORT ITEMS INTO IT! So, you can't buy items on the gray market. You can pay for them there, but you are getting them through the legit market. So there's that, you can't track it.
When i'm talking about "grey market" i'm referring only to keys that can activate you games.
When i'm talking about Steam Market i'm referring to cards or game cosmetic items that can be traded on Steam Market. In this case, there is no "grey market", as there is no doubt, you can't pay from those outside of Steam and trade them on Steam. It's "black market" in that case, as it's illegal. But, as i said, it's hard to prove, as we're talking about items that can't be differentiated. This is done in order for them to be able to get the money they got for items outside of Steam, so it's against the whole intent of the Market purpose.
Then, this is a course of harmful action that can harm someone innocent.
Hacked account > Gift > Traded on market > Bought by me
I shouldn't lose that key, even if it's discovered that it comes from an hacked account or that it was initially bought with a stolen credit card. I'm legit buyer, i buy an item from the market, i can't know from who am i buying it from.
What Steam did now, with their phone authentication, kinda solve this problem.
Hacked account > You need to wait 3 days in order to have your items traded > Poof!
In case of an hacked account, the issue should be solved in 3 days period, so the victim would receive back his items. Hacker can't set up an Mobile Authenticator on that account too easy, as it needs to have it active for at least 7 days in order for the trade to go instantly.
Not to say that, realistically, having your Mobile Authentificator makes your account pretty much bullet proof. As someone said before, you can give away your password, as long as they don't have your phone too, they can't login. "Serious" traders, that would have a lot of items to lose if their account would be breached they kinda need to set up this additional protection in order for their trades to go instantly, so it's an win-win.
This way, there is no need for items to be removed or duplicated, as they are returned to the victim. And yea, you can say that some people will slip through the cracks, and that's real. For example, you are getting your account hacked when you are on your 10 days vacation, where you didn't cared about your account.
Anyway, most of us are pretty much connected to Steam one way or another and we can see some suspect activity from our phone. I have Steam app, and, even if i wouldn't, i have my mail notifications, so i see there if someone is accessing my account.