It's possible the following happened:
1. You let your friends use the account / you ordered a service and never changed the PW.
2. You clicked a RS related link and entered your information then it got jacked.
3. Keylogged, which is unlikely

Only got hacked once in 15 years of runescape.

The Hotmail account tied to my runescape login got hacked, and I guess the hacker was somehow interested in Runescape. Maybe I used same email on a clan site or something, who knows, was 10 years ago. Anyways, they recovered my account through the email and got the acc from me. Luckily it was a shit acc I didnt play anymore with nothing on it, so I emailed him and translated to Chinese and told him to keep it. (Hotmail has this feature where you can locate on the globe the login locations, dude was some chinese guy desperate for GPs to sell on his website prob)

Change password regularly. Use authenticator. Use pin.

You will not get hacked if you follow the above.

What you should've said was,

Change your password; Use authenticator; Change email password regularly; use pin.

If I get your email, I get your account, for good.

If I get your account, with no email, I can't do shit for 7 days with a pin, risk recovery.

Emails are compromised more than accounts these days with being able to by-pass an authenticator (which practically everyone smart uses) through email with no delay

Ive had osbuddy for two years never once have I been hacked

you either clicked on something you werent supposed to (double xp for OSRS, twitch videos, etc)

or someone knows your password

Either way since I set up an authenticator I never had an issue

recommend doing this to your email as well (yahoo offers sending a code to your mobile phone every time you login)

hope this helps sorry for your loss

A while back 1000s of people were getting hacked and many determined it was through the osbuddy client, which id believe since it was a botting client in the past. I was one of them, and I’ve always been careful of links etc.

Best bet is Authenticator on both your account and your email, then you’ll be OK.

This post was edited by Hugger on Feb 21 2018 08:57pm

Another way you might get hacked is by signing up to Forums or certain websites and using the same email/pass as your Runescape account. People hack the forum databases and then try to match those email/passwords to Runescape/diablo/WoW/PAypal,etc. and clean you

gf

set a pin and bank all your items before you log off

This.

Most likely cause of you getting hacked is logging in on a fake site