If you have login access to the account, login and check the 'Linked Accounts' tab in account management. If you see any accounts linked in there, unlink them. Click on 'Manage Steam' to check for a linked Steam account.
It sounds to me like your hijacker has set up a backdoor login method i.e. a linked third party account.
If the only linked account you see is your own, unlink it. It means your account on the other website is insecure.
While an account is banned, it is inaccessible. Even a hijacker cannot access it. They must have logged into it either just before the ban or as soon as it was removed.
So, if you can't see a linked account, the other things you should check are:
Your computer - scan for malicious code. Might have to do a factory reset.
The client you are using to play RuneScape - are you using the official client or Runelite? If you are using Runelite, uninstall it then reinstall from the link on the Jagex Old School home page.
Check once again for a linked account. Click on 'Manage Amazon' to check that one too.
Have you upgraded to a Jagex Account or are you still logging in with your original login?
Original message details are unavailable.
and also when i go to linked accounts, its show google, facebook, steam, and amazon. it says click to link account i click and i dont show any anything other than it offering me to link account with one of those apps.
Hi, OSRSbriggs.
In order to see if you have any Steam or Amazon linked account, you must click on "Manage Steam" and "Manage Amazon". If there are any unrecognized, immediately remove them as these allow you -- or a hijacker, for that matter -- to log into your account without having to enter the password and/or the Authenticator.
If you do recognize any, make sure that they are completely secured with 2-Step Verification. All those tips and instructions on how to make them more secured may be found here:
Security tips
.
I created a step-by-step guide on how to check for linked accounts here:
Linked Accounts
.