Forums

Hijacked Account

Quick find code: 408-409-975-66115122

of 2
Kektous
Aug Member 2019

Kektous

Posts: 4Bronze Posts by user Forum Profile RuneMetrics Profile
I've recently gotten back into OSRS on a brand new account linked to a new E-Mail that I use, and I've been enjoying membership for a while. It came to mind to check on my old account (One that I started back around 2010) to compare how I've done so far. I couldn't find it in the hiscores, so I tried to login but to no avail...Fast forward to now, I just opened up the inbox of my old E-Mail to learn that only on the 30th of last month I have received an e-mail from Jagex confirming an e-mail switch to "mrjones1991@hotmail.com."

This is obviously not mine.

Is there any possible way I could revert this? I've re-secured the old E-mail with a new password. I'm fairly certain I can prove I own the account. How would I go about doing this?
I found nowhere to submit a ticket so I'm posting here...

08-Aug-2019 08:45:40

Malua
May Member 2006

Malua

Posts: 32,467Sapphire Posts by user Forum Profile RuneMetrics Profile
Hi there
Kektous


Are you certain this email change is a genuine Jagex email?
It may have been a phishing email.
Read this information thread: Is this a Jagex email? [Info]

If you find the email is genuine and the registered email of your old account has been changed, you will need to recover the account.
Instructions: Hijacked account
Forum Community Helper -
Information about the Community Helper Team

08-Aug-2019 09:09:21

Kektous
Aug Member 2019

Kektous

Posts: 4Bronze Posts by user Forum Profile RuneMetrics Profile
Thank you for the quick replies.

Unfortunately, it seems it's a real E-Mail by noreply@a.runescape.com.

I have attempted the recovery system provided, however it claims the e-mail is not valid, and I fear it's because of the hijack...

08-Aug-2019 09:46:19

Asahel Frost
Dec Member 2007

Asahel Frost

Posts: 13,768Opal Posts by user Forum Profile RuneMetrics Profile
It is not real.

* Do not click any links or buttons in that email *


The 'from' address on an email is easy to fake so never rely on that to judge the authenticity of an email.

The email has a "Cancel email change" button - right? Jagex emails do not have a cancel button.
Glad to be of service :) (Powered by GPP™ - Share and Enjoy!)
Official Community Helper (Info)
Twitter: @JagexHelpFrost
FC: SilverScaper

08-Aug-2019 09:53:54 - Last edited on 08-Aug-2019 09:55:54 by Asahel Frost

Malua
May Member 2006

Malua

Posts: 32,467Sapphire Posts by user Forum Profile RuneMetrics Profile
You have to identify the account correctly - meaning enter the correct login in the login field.

If you are getting a "not valid" error message, it means you are not using the correct login.

If the account was created in 2010, there is a very good chance its login is a 'username'.
Information: Forgotten login
Forum Community Helper -
Information about the Community Helper Team

08-Aug-2019 09:55:48 - Last edited on 08-Aug-2019 09:57:30 by Malua

Kektous
Aug Member 2019

Kektous

Posts: 4Bronze Posts by user Forum Profile RuneMetrics Profile
Upon further inspection, it seems Asahel is correct. I just looked through the history of E-Mails, and I've apparently received 3 other E-Mails from them for 3 different supposed E-Mail changes.

I can't believe I fell for that. I should've known too, clicking that link took longer than expected before redirecting me to the official RS page...

Any idea what information they could have stolen? I plan on changing all my RS passwords, but if they have access to my browser saved passwords I have a lot more work to do...

Regarding my account, I can't seem to get my login correct. I must be forgetting something, I'll try the recovery systems more thoroughly after I've secured everything.

08-Aug-2019 10:17:25

Asahel Frost
Dec Member 2007

Asahel Frost

Posts: 13,768Opal Posts by user Forum Profile RuneMetrics Profile
Kektous said:
Any idea what information they could have stolen?
Just by clicking the link, they get your IP address.

If you then entered information on their fake Runescape website (such as login name and password) they will have that as well. Often, they will ask for other information, such as bank PIN and Authenticator code (information the real Runescape website wouldn't ask for).

It's unlikely they would be able to get information from your browser, unless they tricked you into installing some malware on your PC.

Kektous said:
Regarding my account, I can't seem to get my login correct. I must be forgetting something, I'll try the recovery systems more thoroughly after I've secured everything.
Was the account created before or after November 2010? Accounts created before November 2010 use the account's first ever display name as their login name. Accounts created after November 2010 use an email address.

The login name for a Runescape account never ever changes, even if you change the registered email or display name.
Glad to be of service :) (Powered by GPP™ - Share and Enjoy!)
Official Community Helper (Info)
Twitter: @JagexHelpFrost
FC: SilverScaper

08-Aug-2019 10:21:29 - Last edited on 08-Aug-2019 10:28:33 by Asahel Frost

Kektous
Aug Member 2019

Kektous

Posts: 4Bronze Posts by user Forum Profile RuneMetrics Profile
That's a bit reassuring. I remember double checking if I was actually on the runescape.com website when I clicked it, and that the "secure" lock was up next to the URL. I've tried to track the link without opening it to confirm this, but it's been shortened twice by 2 different URL shorteners and I can't seem to reach the destination.

I can't remember if I typed anything on it, and in any case, it seems I can't even remember the correct credentials of my account, so even if I did write it on a fake website, I'm pretty confident they have nothing on me in that regard, but password changes can never hurt.

I doubt they can get anything useful out of my IP, my ISP has some nice measures against that.

Thank you for everything you two have helped me with.
That was extremely embarrassing...In my defense I haven't used Hotmail in a couple of years :P

EDIT: Great News! I also just managed to connect to my account. It was in fact older than November 2010, and my first ever username worked!

08-Aug-2019 10:58:41 - Last edited on 08-Aug-2019 11:03:16 by Kektous

Asahel Frost
Dec Member 2007

Asahel Frost

Posts: 13,768Opal Posts by user Forum Profile RuneMetrics Profile
Kektous said:
EDIT: Great News! I also just managed to connect to my account. It was in fact older than November 2010, and my first ever username worked!
Excellent news ! :)

Here's some security advice on securing your PC, email accounts and Runescape accounts:
Security Help
Keeping your email secure
Glad to be of service :) (Powered by GPP™ - Share and Enjoy!)
Official Community Helper (Info)
Twitter: @JagexHelpFrost
FC: SilverScaper

08-Aug-2019 11:16:17

Quick find code: 408-409-975-66115122Back to Top