I had an account guardian. Only my IP address was supposed to be allowed to connect to my account. It seems they removed that feature. By removing the security feature, it really isn't. From the start.
Pay attention and take notes.
In the world of computer programming, a common topic is "User error" and "security management". When you see that your customers (RuneScape players in this case) are getting their entire account stolen, you do not start removing security features. You add security features. Credit card fraud? They don't seem to care.
Imagine for a second that bank accounts would be easy to breach and steal. Wouldn't you be glad that on top of previous security features, they decided to also ask for additional information?
I had, in my opinion, the best possible security. I don't care if you find my password or find whatever else ; My account is locked to my IP address until I remove it by clicking on a link in my email account.
Back to the current scenario : No Account Guadian to be found. (They removed that feature for god knows what reason) The only information I have about this event is an email about a password changed. The only way to only have that email and nothing else would be via "account recovery" while using a secondary email to receive the thread with support.
That's exactly what I had using the account recovery feature.
I sent them a request to know more about what happened. Of course, employees cannot declare that they are at fault. They are accusing my email account to have been breached. My email account has a 2 step security and it feels way more secure than my RuneScape account. I can see the previouslogins. I have had it all my life and not a soul managed to get in other than me.
All of this would never have happened if the lock on my IP address would still be there. It is their fault. You can put your fingers in your ears and play deaf on the topic all you like and say that we are turning in circle : The facts remain the same.
24-Dec-2022 18:43:15