TruthScape.com  9  The Truth About RuneScape Account and Password Scamming and “Hacking”       9  Common Ways Players Get “Hacked” Outside the RuneScape Game

Using Private RuneScape Servers Visiting Scam Web Sites (Counterfeit RuneScape Sites, Fake RuneScape Servers, Malicious Fan Sites and Cheat Sites)

The term phishing refers to activities undertaken by scammers to obtain personal information through fraud. (The term comes from “fishing” because the scammers hang out “hooks” and try to catch “fish”—that's you, by the way, if you aren't careful.) The most common way that this is done is by sending fake emails that appear to be from reputable companies and sites. Phishing is often done to try to get real world information like Paypal account passwords and eBay logins, but is also used to get RuneScape passwords.

Defending against RuneScape-related phishing is simple: if you ever get an email that claims to be from Jagex, or makes any sort of offer related to RuneScape, or asks for your password in any way, do not follow its instructions, just delete it. These are always scams.

It's important to realize that forging the “from” address on an email, a process called spoofing, is ridiculously easy. Anyone can make any email appear to be from Jagex or anyone else. It is for this very reason that Jagex does not send emails to RuneScape players. Therefore, if you get any email that claims to be from Jagex, it is a scam. If Jagex wants to contact you, it will always be through the RuneScape message center, not via email.

Note that you may also receive similar phishing attempts in instant messages. They should be discarded as well.

Here are some of the specific ploys that RuneScape phishing emails may try:

• Offering to upgrade stats or give you items if you send the person your password.
  
  
• Claiming that the user can provide you with the user name and password of another player if you give them your user name and password.
  
  
• Providing links to a “great new site” that will help you in RuneScape (see the next topic for details.)
  
  
• Telling you about the all new “RuneScape 3” and giving you the chance to be one of the first players. There is no RuneScape 3—this is a scam.
  
  
• Saying they are from Jagex and need you to confirm your password to ensure you aren't cheating. They may threaten to ban you if you don't cooperate, but do not fall for this! Remember: Jagex never asks for passwords, and never sends emails.
  
  
• Claiming the email is from Jagex and insisting that you reply back with answers to your recovery questions.
  
  
• Providing you with bogus offers to be made a player moderator / forum moderator / Jagex staff member, if you provide your password or visit a bogus site.
  
  
• Stating that the email is from a “former employee” of Jagex who was fired and now wants to get “revenge” on Jagex by giving away items/levels/whatever.
  
  
• Saying that the sender is Zezima or some other “RuneScape celebrity” and offering to give you free items if you reveal your password.

Finally, beware of fake RuneScape emails that have attachments, often claiming to let you “cheat” at RuneScape or gain an advantage in some other way: these are usually keyloggers or other malware. Do not download these attachments for any reason!

In fact, you should always be careful with attachments, even if they appear to come from friends, as they might have keyloggers or other malware in them that your friend doesn't know about. But if the attachment is in a scam email, it will pretty much always contain malware!

Using Private RuneScape Servers Visiting Scam Web Sites (Counterfeit RuneScape Sites, Fake RuneScape Servers, Malicious Fan Sites and Cheat Sites)