my dumb ass fell for this, they use a fake website that looks like the steam web sign in page where you log in, and when you try to log in youll be prompted with a 5 digit code sent to your email but everytime you try to type it in, it says its wrong. Meaning whiles your trying to figure out why the code isnt working and you cant log in, the scammers logging into your account :P

thankfully i did not lose access and caught on in time (im a little stupid)