# Account access & accountability — The Steam Dossier

> Part II of The Steam Dossier: account access, outsourced support and the demand for accountable enforcement.

Canonical: https://phishdestroy.io/steam_dossier/investigation_part2
Language: en
Author: PhishDestroy Team
Publisher: PhishDestroy

## Reading

- [Published page](https://phishdestroy.io/steam_dossier/investigation_part2)
- [Complete Markdown](https://phishdestroy.io/steam_dossier/investigation_part2.html.md)
- [Complete plain text](https://phishdestroy.io/steam_dossier/investigation_part2/llms-full.txt)
- [Investigation index](https://phishdestroy.io/steam_dossier/llms.txt)

## Sections

- [Automation has a paper trail.](https://phishdestroy.io/steam_dossier/investigation_part2#automation-map)
- [Which key are we talking about?](https://phishdestroy.io/steam_dossier/investigation_part2#api-distinction)
- [Personal Web API key](https://phishdestroy.io/steam_dossier/investigation_part2#api-distinction)
- [Publisher Web API key](https://phishdestroy.io/steam_dossier/investigation_part2#api-distinction)
- [OpenID / session tokens](https://phishdestroy.io/steam_dossier/investigation_part2#api-distinction)
- [Automation can use more than an API key.](https://phishdestroy.io/steam_dossier/investigation_part2#token-documentation-note)
- [Still playing. Already exposed.](https://phishdestroy.io/steam_dossier/investigation_part2#unseen-session)
- [Silent session token capture](https://phishdestroy.io/steam_dossier/investigation_part2#session-hidden-title)
- [The item can be rare. The limit stays.](https://phishdestroy.io/steam_dossier/investigation_part2#market-ceiling)
- [Entrusted with data. Accountable for access.](https://phishdestroy.io/steam_dossier/investigation_part2#support-access)
- [The scale was public](https://phishdestroy.io/steam_dossier/investigation_part2#support-access)
- [Valve outsourced the desk — and said so](https://phishdestroy.io/steam_dossier/investigation_part2#support-access)
- [The first admission](https://phishdestroy.io/steam_dossier/investigation_part2#support-access)
- [The second admission](https://phishdestroy.io/steam_dossier/investigation_part2#support-access)
- [The way in was Steam Support itself. Valve said so in writing.](https://phishdestroy.io/steam_dossier/investigation_part2#outsourcing-case)
- [Every amount needs a case.](https://phishdestroy.io/steam_dossier/investigation_part2#loss-register)
- [231,829 accounts on sale. Valve holds the logs for every one.](https://phishdestroy.io/steam_dossier/investigation_part2#part2-sources)
- [Trustpilot records](https://phishdestroy.io/steam_dossier/investigation_part2#part2-sources)
- [Steam account listings](https://phishdestroy.io/steam_dossier/investigation_part2#part2-sources)

## Evidence and downloads

- [Open capture record ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/lzt.market.json)
- [Open Link Filter trace ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/linkfilter-evidence-lzt.json)
- [map provenance](https://phishdestroy.io/steam_dossier/steam_tos_assets/automation-map.json)
- [Repository source data ↓](https://phishdestroy.io/steam_dossier/output_steam_network/raw_data.json)
- [Two preserved posts, source rows & hashes ↓](https://phishdestroy.io/steam_dossier/steam_tos_assets/outsourcing-archive-records.json)
- [Collection audit ↓](https://phishdestroy.io/steam_dossier/steam_tos_assets/part2-quality-review.json)