I'm not sure where else to post this, so it's going here. About a week ago, I got an email in my spam folder saying that my email address for my Runescape account has been changed. I glazed over it because the email was in my spam folder, but also because it was from some strange URL I've never seen before and didn't look to be associated with Jagex at all. Normally emails from Jagex have their name in it somewhere and this one did not.
On Friday, I got another email in my spam folder that was from the same address saying that my email associated with my Runescape account has been successfully changed. Again, I thought nothing of it. I tried to login yesterday and received the "too many login attempts" message on both Runelite and OSBuddy, but could login fine on the Jagex client. At this point I was legitimately concerned about the integrity of my account so I have a look through my account settings and sure enough my email has been changed to the same email that was mentioned in the apparent fake emails. This makes no sense to me because everything I know tells me those emails were fake. I should also mention I have not made any requests to change my email, password, or anything lately.
It's clear to me now that it seems that my account security is compromised, but I don't know what to do at this point since attempting to reset the password or email address sends the confirmations to the email address I don't know or have access to. I tried to make an account recovery request, but it was denied.
26-Feb-2023 13:33:25
