Accepted 76561198148292172 (ySQ#)

Scammer:
| steamname: ySQ#
| steam3ID: [U:1:188026444]
| steamID32: STEAM_0:0:94013222
| steamID64: http://steamcommunity.com/profiles/76561198148292172
| customURL: http://steamcommunity.com/id/ysq420blazeit
| steamrep: http://steamrep.com/profiles/76561198148292172

Target:
| steamname: аdvicebanana
| steam3ID: [U:1:23045495]
| steamID32: STEAM_0:1:11522747
| steamID64: http://steamcommunity.com/profiles/76561197983311223
| customURL: http://steamcommunity.com/id/advicebanana
| steamrep: http://steamrep.com/profiles/76561197983311223

What happened?
I advertised my knife for sale on CSGO Lounge. The accused added me and showed intent to buy it. In order to "be comfortable" he suggested sharing our screens. He would show me preparing a payment (I saw >1600€ of balance in his paypal account) and he would watch me prepare the trade afterwards, I assume, was the narrative he was pushing.
I suggested TeamViewer, he agreed with it. Then I hesitated and suggested Logmein's join.me instead. The latter does not allow remote control, afaik, so it would be natural for the alleged scammer to insist on using the first.
Anyway, I tweaked TV's settings so as to allow the other person to view my screen, but not allow any other privileges.
He told me my screen was black. I relaxed the settings a bit while still allowing him to view my screen. He still claimed that my whole screen was blocked and suggested I fix Teamviewer's settings and just give him full access and adjust that after he's connected.
This 2nd time, I had not set Teamviewer to ask before letting people to connect, but merely allowing them, so it would not have looked any different if I had given people full access or merely selected privileges.
I asked Pointy if he was able to see which privileges I have given him, and he showed me a window with just that. That would be enough for the alleged scammer to claim that something was not working and ask for full access instead. Which he did.

To rule out mere accident, I asked several people to connect to me via Teamviewer and see how it looked to them. Most did not have it, but @Pointy did and according to him, everything was working fine.
My hypothesis is that the accused tried to social engineer me into giving him complete control via the Teamviewer connection after I had previously established that it's no big deal when I was connected to him.
From that point, he would be able to block my access and then quickly confirm trades if I wasn't quick enough.
(Pulling the network cable or shutting off the power to my machine would defend against that, depending on how well it is possible to revoke the partner's access on Teamviewer.)

Screenshots:
They show parts of my desktop, so I'll make those private.

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

 

I can vouch for this.

 

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

 

Hey @advicebanana and @Pointy . I'll be investigating this report for a bit until I mark it. The reason for this is its length.

Under Investigation

I do have to say that the /pt part stands for Portugal. When I use the link it directs me to a Portuguese version of Paypal.
@advicebanana , you mentioned the accused claimed that he has a black screen and that the accused should get all permissions. Do you have any chats of that too?

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

@Tio José das Vacas

 

Yes. Here are some screenshots I forgot to upload earlier:

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

(I had set the "view desktop" setting to "ask" on the first attempt and accepted his request to share my desktop. He claimed that I had denied him access.)

 

Ready for Review. Thanks for your assistance and thanks for the report, both @advicebanana and @Pointy

 

Accepted a Full Tag will be applied.

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**