I have had one phisher added on Steam for about an year or so, just because I was curious how long it would take for their account to become suspended or even deleted.
The answer to that question was.. Never? When they get to it? Sometimes? I hit the report limit before it happened, so as I was no longer able to report that Steam account I just ended up unfriending them.
I didn’t spam the report either, only did it once for each unique phishing link, and I would estimate that I only reported them 15 to 25 times. Maximum report amount was twice a day if two unique links were posted within 24 hours of time. I didn’t count the actual amount and this is only an estimate. And I can’t check the date when they sent me a friend request because their inventory is private and I often use the trade offer view on Steam to see the date when I accepted their friend request.
Maybe this case was immune to getting suspended because the phishing link required “signing up” before giving you the phishing element. You had to register an account using email login, which never was used for verification emails or anything. After that you were automatically logged in to that user on the site. After which you had to sign up for any tournament they had listed, usually 3-5 different ones are shown. Only after clicking a tournament to sign up they asked you to login via Steam. So the actual phishing element was sort of hidden from public view and you had to work for it first. This particular Steam account was often seen as in-game for CSGO, almost daily. However they never played a single match of the game, either idled in lobby or had a program to fake in-game status.
Should I perhaps try this again with another Steam account? Get the real numbers, both reports and links posted, until I hit the report limit once again.
Reminder to anyone submitting reports against other Steam users
Only do it once per violation of the rules, EULA, TOS, or other agreement.
Spamming reports only causes longer queues for moderation and slows down the process that they go through each report which impacts the overall process of reports. And only report what you can confirm or even experience yourself, there is no reason to gather around all of your friends and ask them to report something they didn’t see or experience themselves.
The new limit is 1 report per account as per my new testing.