A player added me as friend and invited me to lobby to talk. He invited me to be a mod and wanted email to send link to application. I stupidly gave him email address. I realised that the application was bogus so didn't complete it. I have changed email password and runescape password and I already have authenticator set up. I reported him. Do I need to do anything else to make sure my account is secure?