You can drop by here any time, to find your one–stop–shop for all your Phishing questions. Take your time to have a browse through our information – more often than not, your answer is just a few clicks away - you’ll be wading back into the adventure again in no time!
If you are on a tight schedule then simply remember to perform the following checks on emails that are purporting to be from Jagex.
You can find more information about how to complete the above steps in the “what is phishing” section of the Wiki below.
Remember we will not contact you about your account being suspended, being in the danger zone, or that you are attempting to sell your account.
You can contact us around the clock, for in-depth knowledge and advice from our Account Help Team.
To your browser
While I wouldn’t recommend visiting a phishing site to anyone, if you are already on the site then you can report it to your browser. They will use your report to block the site with a warning for anyone who tries to access it in future. Below is a table of how to do this with the most commonly used browsers. If your browser isn’t listed then please review the help documentation, which is available within the application, for more information.
| Web Browser |
Method |
| Internet Explorer |
- Select the tool menu (cog icon) located on top right hand side of the page .
- Select Safety from the list of options and then Report unsafe wesbsite.
- A new window will open giving you the options to report the site as phishing, or that it contains malicious software. Select the box that applies and the language that is used on the website. For the report to go though you will also need to complete the CAPCHA at the bottom of the page. Once completed, submit the report.
|
| Firefox |
To report phishing in Firefox you can use the user form which can be found at http://www.google.com/safebrowsing/report_phish/?tpl=mozilla |
| Chrome, Opera, Netscape and Safari |
To report phishing in these browsers you can use the user form which can be found at http://www.google.com/safebrowsing/report_phish/ |
To your E-mail provider
If you are certain you have received a phishing email then you can report it to your email provider. They will then kindly remove the email from your inbox and mark any future emails from this sender as spam/junk. For more information about how to do this, please view the table below. If you can’t find your email provider here, then take a look at the help documentation which should be available on your provider's website.
| Email Provider |
Method |
| Gmail |
Open the email message. Click the "Report spam" button at the top of the page. (It's the thrid button from the left and has an Octagon with an exclamation mark on it). |
| Hotmail, MSN and Windows Live |
Open email message. Click "Mark as" at the bottom of the page and choose "Phishing scam". |
| Yahoo |
Open the email message. Click on the “Spam” button at the top of the mail. Alternatively, you can report them to Yahoo by visiting [abuse.yahoo.com abuse.yahoo.com]. |
To PhishTank
Reporting phishing sites to PhishTank will mean that a whole range of agencies will be alerted to the scam; this includes security companies such as Kaspersky, McAfee and the Anti-Phishing Working Group (APWG).
To us
When you receive a phishing email or come across phishing website you can also report it to our customer support team using the reportphishing@jagex.com email address. We will then work to remove the site as quickly as possible.
If you have a general query about phishing or you are unsure about an email you have received, you can contact accounthelp@jagex.com and a mod will be happy to help you with your request.
Sender and Header Information
So you think you have an email from Jagex. Are you sure, 100%? Email addresses can be spoofed, meaning that it is possible to make an email appear that it was sent by Jagex, even if it wasn't. To make sure the email you are receiving is in fact from Jagex you can check the email header information.
The new header (source) will now read: (the asterisk are because the front string can change from email to email)
Received from: ******.bluehornet.com
The email addresses that we are currently using are:
noreply@a.runescape.com
noreply@e.runescape.com
These are the only two email addresses RuneScape will contact you via email from. Any other email addresses are not ours so please remember to always check the sender and add the above addresses to your address book so you don’t miss any important messages!
If you are registered for, or are planning on registering for Jagex Account Guardian, please note these emails will come from noreply@a.jagex.com.
Display Names:
We now include your display name in all RuneScape emails for added peace of mind. If you have received an email you think is from us that doesn’t contain your display name, please contact reportphishing@jagex.com and do not click on any links.
We have included instructions about how to do this for the more popular providers below. If your provider is not mentioned here please review the help documentation, which is available within the application, for more information.
Click here for more information
| Email Provider |
Method |
| AOL |
Open the email message. Click "details" under the "To" field. |
| Gmail |
Open the email message. Click the down arrow next to the "Reply" button. Select "Show Original". |
| Hotmail, MSN and Windows Live |
Right click the email message. Select "View Message Source". |
| Yahoo |
Open the email message. Click on the "Full Headers" option (lower right hand corner). |
| Microsoft Outlook |
Open the message by double clicking it. Find the Options panel in the message ribbon (it's the fourth blue thing at the top of the message Click on the little arrow in the lower right corner of the Options panel. This should display the header box. |
| Mozilla Thunderbird |
Open the mail message. Go to the View menu and select Message Source. |
Email Content
When reading an email that appears to be from Jagex, check that it makes sense! We don’t want to make a bad impression, so when we contact you through email, we will always use the correct spelling and grammar. If it looks to be written by a 5 year old then don’t trust it.
Hyperlinks
Pretty much every phishing email you see will have a hyperlink which will direct you to a malicious version of the RuneScape website.
NEVER click on these links!
If you are unsure, you can hover over the link with your mouse and your browser will display the actual location of the URL at the bottom of your screen. If this address differs significantly from what is shown in the email, do not visit the site.
Chat
Phishing can also occur in game. The most common example is a player impersonating a Jagex Mod or Player Mod. They might tell you that you have a “problem” with your account, or that you have been selected to become a Player Moderator. Remember if you are talking to a J Mod they will have the Gold crown in the chat window and their name will ALWAYS start with "Mod", if you are talking to a P Mod they will have a Silver crown.
You can find out more about Mods in the Moderators section of the wiki.
Malicious Sites and Downloads
Some scammers may just ask for your account information directly in game, others may ask you to visit an external website to enter your login details. These players are usually offering moderator status, free items, and free spins on the SOF or require you to post on the forums to be a part of their clan. Be cautious of any sites that require you to download anything, if in doubt refuse the download and scan your computer instantly.
When asked to leave the official RuneScape page always be cautious, plus why would you want to leave anyway!
