Verify identities if sent a link, and don't click links sent in Steam messages Never login to Steam with full credentials on 3rd party sites Contact support, check your blocklist, and deauthorize ...