Hey all,

A few months ago I fell for a phishing scam where the scammer was impersonating a twitch streamer. They were streaming what in hindsight was a previous stream from the streamer. In the chat they had their nightbot equivalent occasionally sending out a link, and I fell for it.

Either way, I got got.

Moments after I typed my login info, something clicked and I went back to the stream just to realize the mistake I had made... The streamers name was 1 letter different. I immediately changed my password, but it was too late. Now whenever I'm offline for more than a couple of days, my account gets locked (not banned). I tried changing my email, but that didn't help because, as I've since learned, you can't change your login email.

A couple of months ago I sent in a ticket to Jagex regarding this situation, but they still have not responded. Not even something as little as "theres nothing we can do." I recently sent in a refund request and cancelled my membership, hoping maybe that'll prompt a response; however, the truth is I've spent a lot of time on this account, and I would still very much enjoy playing it and eventually maxing. Also I have very little hope that Jagex will do anything for me. On 2 occasions I have unlocked my account and logged in where my bank pin has been removed. I just don't see the point in continuing to play when any day could be the day all my stuff is stolen, or banned.

Posting here as a last ditch effort for hope. Am I completely shit out of luck, or is there anything I can do?

Thanks for reading.

TL;DR - I'm an idiot who fell for a phishing scam. My account seems to be under constant threat, and Jagex does not appear to care in the slightest. I changed my email, but that didn't help since it has no effect on the email you use to login. Am I SoL?

what info did u provide to the scammer? If he has access to the recoveries, best thing u can do is drink a cold water and start again. Maybe try out ironman, much more fun without the trade option

It was just my login info, the link made it seem like you were logging into the Runescape website. Pretty much the second I "logged" in to the phishing link I realized I was making a mistake.

So to answer: My login Email and my original password are the details I gave away.

has he been able to recover the account? Not sure you can recover with only your email and one password. Maybe just getting locked since he is making attempts to recover

I thought that originally, but what is scary to me is that I've logged in to my bank PIN being removed 2 times now. Does that indicate that they're getting into my account, or is that a regular side effect of having your account locked for a while?

What can I say bro? There is no other thing u can do but forget about the account. A similar thing happened to me and the person managed to get ahold of recoveries etc and we kept fighting back and forth until I left it completely and started again.

Yeah I figured I was screwed... Thanks for the confirmation.


I'm not holding my breath, but hopefully Jagex will refund me cause my accounts been locked more than active for the past few months. Pipe dream I know.

Like it said X amount of days till pin is removed?

No - it was just gone. I've been really inactive since this happened, so there was probably more than the removal wait time between logins. I suspect the account getting locked is what has saved my items these times if indeed the scammer is accessing my account.

Idk that sounds very odd.

The password wasnt even changed when you logged back in? Just the pin deleted?