forums.rs

Forums

Account hacked 2FA and PIN ON.

Quick find code: 408-409-417-66287030

Runkiller97
Oct Member 2023

Runkiller97

Posts: 3 Bronze Posts by user Forum Profile RuneMetrics Profile
I just tried to log in after a couple off weeks to check on my account, only to find i needed to recover it. It seemed very strange but i continieud anyway. Olny to find out when i log in all my stuff aprox 100-120M worth of object gone out of my bank.
My 2FA and bank pin are on and still someone got into my account. Eventhough my only authentication generator is on my phone.
How could this happen and is there i way i can get all my money/stuff back.
I am not very good at the game and played for almost 1000 hours to collect this stuff. Not getting it back would mean the end as i dont want to start over since i got hacked before.

kind Regards Runkiller97

12-Sep-2023 20:38:54

Ladyolake
Jan Member 2008

Ladyolake

Posts: 7,111 Rune Posts by user Forum Profile RuneMetrics Profile
Make sure that the hijacker did not link 3rd party apps to your account such as fb or steam etc.

IT is very concerning that you have been hijacked before.

if you use osrs do you use runelite? if you do, did you download it from the osrs homepage?

Was your 2fa taken off ? was your password changed? if so then that means they have access to your email.

I would go over all security tips that jagex suggests and after everything is secure upgrade to a jagex account.

lastly, jagex does not return items due to hijacks or scams. So, you will have to rebuild.

i know most people do not want to hear that somewhere their security is lax but in all honesty, most people are never hijacked.

I have 18 accounts and only 1 was hijacked in 2009.. and that was by a person i knew in real life that actually had been inside my house.

At this point you really need to go thru all your security. Good luck The richest person is not who has the most. It is who Needs the least.

12-Sep-2023 23:31:58 - Last edited on 12-Sep-2023 23:34:19 by Ladyolake

Malua
May Member 2006

Malua

Posts: 43,113 Sapphire Posts by user Forum Profile RuneMetrics Profile
Hi there
Runkiller97


You should check the 'Linked Accounts' tab in account management.
If you see any linked accounts in there, unlink them (including your own).
Click on 'Manage Steam' to check for a linked Steam account.

If the hijacker has set up a linked account, they can bypass all your security set up so, I suspect a linked account is being used.
If only your own linked account is there, it means your account on its other website is insecure.

If there are no linked accounts at all, it means your computer has malware installed but access to RuneScape shouldn't be possible if your Authenticator is installed on your phone.

Was your password changed? Is that why you needed to recover your account?
If so, it means your email is insecure.
Change the password to your email right away. Choose a brand new, never used before pw.
Set up 2-step verification on your email if possible.

The full RuneScape security instructions are: Security tips
I recommend you consider upgrading your account into a Jagex Account. Jagex Accounts are much more secure than the old RuneScape accounts.
Information: Jagex Accounts FAQ Runkiller97 said :
How could this happen and is there i way i can get all my money/stuff back. If your email was insecure, the hijacker could have found out quite a lot about you. Other than that, I am not sure how it happened.
Jagex usually does not replace items/gp stolen by hijackers.
Their information article: Lost items
Forum Community Helper -
Information about Moderators and Community Helpers

12-Sep-2023 23:41:18

Quick find code: 408-409-417-66287030 Back to Top