ok so I was stupid and fell for a phishing trap and now I can't recover my account I can still log in but the only problem is someone else can log in whenever he wants I try to change my password I get e-mailed by this [email protected]> mail which isn't official domain according to phishing support: Official Jagex domains
Check email and website addresses carefully as some fraudsters spoof our official Jagex domains. Official website and email domains will always end in:
Is your email still registered?
You can check this in account management under
'Communication Preferences'
.
Also, check the 'Linked Accounts' tab in account management.
If you see any accounts linked in there that shouldn't be, unlink them. Click on 'Manage Steam' to check for a linked Steam account.
Your hijacker problem might be as simple as them having linked a shortcut login through the 'Linked Accounts' tab. And, when you unlink the linked account, your account might be secure again.
Instead of
'changing'
your password,
'reset'
it.
Go to the
Reset password
support page and use the 'Account Recovery' button.
Resetting it will force log out anybody who is logged in at the time.
Make sure you set a brand new, never used before password.
If you hit that 'Account Recovery' button and enter your login, the automated email you receive WILL be from Jagex. The message about fraudsters is really referring to unsolicited emails. If you have
requested
an email from the website then the response email from Jagex will be genuine.
To add a bit more to the message that Malua shared above, if you wish to see if any unauthorized linked accounts are present, you should then follow the instructions below. You'll see screenshot for better visualization. If you don't recognized any, remove them immediately as linked accounts allow anyone to log in without entering the password and/or the Authenticator. If you added them yourself, you will also have the option to protect them.