Forums

My Account got Hacked Somehow

Quick find code: 408-409-527-66103599

Ghostdog93
May Member 2019

Ghostdog93

Posts: 6Bronze Posts by user Forum Profile RuneMetrics Profile
I have no idea how my account got hacked, i never once put my password into any websites or apps or anything. My computer has 0 viruses or spyware. I lost nearly all my valuable stuff and obviously all my coins. The policy is they can't roll back my account or give me back my stuff. I mean my account being hacked isnt my fault, something happened not on my end here. Its whatever I only lost about 10 mil, the main problem was all the smithing ores i was planning on using that i now have to remine.

You can't give me back my stuff, I get that, but I can't even report this. Obviously the last accounts I traded with are the ones who hacked my account (I wasn't the one who traded, but they obviously took my account sold all my shit then gave it to another account). Is there any way to look at those accounts and ban them and any accounts they traded my stuff to?

EDIT: This is Old School Runescape account btw. I have one on both i think, they have the same username.

02-Jun-2019 05:57:45 - Last edited on 02-Jun-2019 06:14:08 by Ghostdog93

Malua
May Member 2006

Malua

Posts: 31,422Sapphire Posts by user Forum Profile RuneMetrics Profile
Hi there
Ghostdog93


Check the status of your Authenticator:
Is your Authenticator still active or has it been disabled?

The status of your Authenticator provides a pretty good clue as to how the hijacker managed to access your account.

If your Authenticator is still active - it means you have been phished or deceived on social media (enticed on to a fake RS webpage)
If your Authenticator has been disabled - it means your email is insecure

To re-secure your email: Keeping your email secure
To find out about fake RS webpages: Fake websites
And re-secure your computer: Securing your computer

If you find a fake RS webpage URL in your browser history, report it to reportphishing@jagex.com
Forum Community Helper -
Information about the Community Helper Team

02-Jun-2019 06:29:42 - Last edited on 02-Jun-2019 06:31:11 by Malua

Ghostdog93
May Member 2019

Ghostdog93

Posts: 6Bronze Posts by user Forum Profile RuneMetrics Profile
Malua said:
Hi there
Ghostdog93


Check the status of your Authenticator:
Is your Authenticator still active or has it been disabled?

The status of your Authenticator provides a pretty good clue as to how the hijacker managed to access your account.

If your Authenticator is still active - it means you have been phished or deceived on social media (enticed on to a fake RS webpage)
If your Authenticator has been disabled - it means your email is insecure

To re-secure your email: Keeping your email secure
To find out about fake RS webpages: Fake websites
And re-secure your computer: Securing your computer

If you find a fake RS webpage URL in your browser history, report it to reportphishing@jagex.com



Itís disabled actually, so my email is insecure and they were able to get my password from that? How? I donít have any emails from Jagex and they donít use the same password. I have never put my password into any websites or anything. The only times Iíve logged on were to download the game, post this, and to change my password after Iíd been hacked.

I think an issue might be that the account is very old and uses the same password I used years ago when I last played. But again I am pretty careful about my passwords, I never enter my main email into any website that I donít fully trust. My computer is 100% protected as well.

I did read somewhere that accounts can be rolled back, losing all progress including the bank. Is that an option at all? I donít care if itís 3-4 days rolled back I kinda just want my stuff back.

02-Jun-2019 09:26:34

Skod†River
Nov Member 2009

Skod†River

Posts: 6,538Rune Posts by user Forum Profile RuneMetrics Profile
I am really sorry to hear about this :(

But here are some facts , the registered email for our accounts are the front door key to our account(s) , meaning they can get your Login name/email , Your Password , even disable Auth (which you already found out) , and even more.

Sadly do you need to rebuild what you lost , since Jagex do not return or reroll accounts after Hijack/Hack/Scam , you can read more about that in this pages :

https://support.runescape.com/hc/en-gb/articles/360000884098-Lost-Items-Policy
https://support.runescape.com/hc/en-gb/articles/207253695-Our-Rollback-Policy

So when a Hijacker do have access to our email are they trying everything to hide that they have access.
Clan : Order Of Adventurers

FriendsChat : Ooa team

02-Jun-2019 09:35:52

Malua
May Member 2006

Malua

Posts: 31,422Sapphire Posts by user Forum Profile RuneMetrics Profile
See if you can check the logins to your email.
The hijacker can delete received Jagex emails but they cannot wipe their logins to your email.

If the hijacker had access to your email they could have got all the information they needed EXCEPT for the Bank PIN.
The Bank PIN would have stood as the last line of defence to protect your items and gp.

Please make sure you have one set after this:
Setting a Bank PIN
Forum Community Helper -
Information about the Community Helper Team

02-Jun-2019 11:43:06

Ghostdog93
May Member 2019

Ghostdog93

Posts: 6Bronze Posts by user Forum Profile RuneMetrics Profile
Skod†River said:
I am really sorry to hear about this :(

But here are some facts , the registered email for our accounts are the front door key to our account(s) , meaning they can get your Login name/email , Your Password , even disable Auth (which you already found out) , and even more.

Sadly do you need to rebuild what you lost , since Jagex do not return or reroll accounts after Hijack/Hack/Scam , you can read more about that in this pages :

https://support.runescape.com/hc/en-gb/articles/360000884098-Lost-Items-Policy
https://support.runescape.com/hc/en-gb/articles/207253695-Our-Rollback-Policy

So when a Hijacker do have access to our email are they trying everything to hide that they have access.


Well they couldnít have gotten into my email as I have 2-step verification. This is why I am pretty sure the hack didnít happen because of anything Iíve done.

I understand, just wanted to make sure there was no way to get my accounts stuff back.

02-Jun-2019 19:06:54

Ghostdog93
May Member 2019

Ghostdog93

Posts: 6Bronze Posts by user Forum Profile RuneMetrics Profile
Malua said:
See if you can check the logins to your email.
The hijacker can delete received Jagex emails but they cannot wipe their logins to your email.

If the hijacker had access to your email they could have got all the information they needed EXCEPT for the Bank PIN.
The Bank PIN would have stood as the last line of defence to protect your items and gp.

Please make sure you have one set after this:
Setting a Bank PIN


They couldnít have access to my email, I have all the bells and whistles to protect it. I did create a bank PIN, but I may decide not to play anymore. The stuff can be replaced but my time canít be and they basically stole 2 weeks from me. Kind of disappointing, Iíve done almost everything I could to protect my account.

02-Jun-2019 19:09:43

Vlumondoxa
Mar Member 2019

Vlumondoxa

Posts: 2,031Mithril Posts by user Forum Profile RuneMetrics Profile
Hey,

Unsure what email provider you use, but some of them aren't even secure. If you're using an Google Account for example, I suggest you to enable 2FA on it.

Which email provider are you using, maybe we can help you look for activity you don't know.

Also, in your first post you're saying that it isn't your fault that you're hacked but it is. Since you somehow didn't secure everything. ;-)
I don't have a signature, but wanted to have some content here.

02-Jun-2019 19:19:03

Ladyolake
Jan Gold Premier Club Member 2008

Ladyolake

Posts: 3,722Adamant Posts by user Forum Profile RuneMetrics Profile
if your authenticator is disabled its one of two problems

problem 1- they recovered the account meaning they knew your very first password
he ips, and they did it from location you made account from.. need more info than
this but that is an example..

proble 2 way more likely- they have access to your registered email.

So either someone at you house knew every bit of creation details, or your
not the owner.

OR

they have access to registered email.

If it was Jagex not being secure..thousands of people would be posting.
The richest person is not who has the most. It is who Needs the least.

03-Jun-2019 00:13:34

Quick find code: 408-409-527-66103599Back to Top