TruthScape.com  9  The Truth About RuneScape Account and Password Scamming and “Hacking”       9  The Basics of Account and Password Scamming and “Hacking”

Understanding Keyloggers and Other Malicious Software (Malware) Typical Causes of RuneScape In-Game Password and Account Scamming

With item scamming, there isn't much you can do after the fact other than reporting the scammer. But if your password gets scammed there is a lot you not only can do but should do.

If you get your account stolen you will of course be upset, but don't beat yourself up, complain to Jagex customer service, or post to the forums about it—none of that will help. Take a deep breath, calm down and assess what happened. Then you can decide what to do, based on the nature of the scam and the status of your account.

The first priority in this situation is to ensure that you clean your computer of any keyloggers or other malware, before you do anything else. If you do not, you may end up giving the scammer more information, including your new password or even the answers to your recovery questions!

Follow these steps:

1. Download an anti-spyware program and run it on your PC. Two of the most commonly used are Spybot Search & Destroy and AdAware SE Personal Edition, both of which are free. If you already have one of these programs, make sure it is up to date.
   
   
2. Run the program and follow its prompts to remove any malware you find.
   
   
3. You may need to reboot your computer. Running the anti-spyware program again to check that the keylogger is gone is a good idea.
   
   
4. Run an up-to-date virus scan.
   
   
5. Check for any security updates for your operating system and browser; download and install them.

Now your PC should be clean. Restore your account by following the steps in the section below called “Recovery If You Were Password Scammed Outside the Game, or In the Game but are Logged Out”.

If someone in the game tricks you into giving them your password, do the following:

1. Do not log out! The scammer cannot try to steal your account while you are still logged in.
   
   
2. Report the scammer using the “Report Abuse” button, Rule #3.
   
   
3. Open a new browser window, and go to www.runescape.com. On the left side, under “Account Management”, click “Change your password”.
   
   
4. Enter your username and password to access the feature, then follow the instructions on the screen to set a new password. Hit “Submit Request”.
   
   
5. If you do not have recovery questions set, set them now!

In this situation you will not be able to log into the game (or the RuneScape web site). Here's what you should do:

1. Are you sure you didn't lose your password because of a keylogger or other bad software? If you aren't sure, see the section above called “Cleaning Your Computer, If You Were 'Hacked' or Your Password Was Stolen Outside the Game”.
   
   
2. Go to www.runescape.com. On the left side, under “Account Management”, click “Recover a lost password”.
   
   
3. Enter your username and select “Someone else has changed my password” from the drop-down box, as shown in Figure 107. Click “Submit”.
   
   
4. Enter the answers to your recovery questions, and also provide as much of the other information requested as possible. The more you provide, the more Jagex has to work with in getting your account back.
   
   
5. Submit the information and wait for Jagex to process it.
   

   Figure 107: Password Recovery on the RuneScape Site

   If your password has been scammed, go to www.runescape.com, select “Recover a lost password”, enter your username and then select “Someone else has changed my password”. Then follow the directions on the subsequent screen.

   
   

In some cases the scammer may not only have your password, he may have also changed your recovery questions. If so, do the following:

1. If this might have occurred because you downloaded a keylogger or other malware, follow the instructions the section above called “Cleaning Your Computer, If You Were 'Hacked' or Your Password Was Stolen Outside the Game”.
   
   
2. Go to www.runescape.com. On the left side, under “Account Management”, click “Recover a lost password”.
   
   
3. Enter your username and select “Someone else knows my recovery answers” from the drop-down box. Click “Submit”.
   
   
4. Provide as much information as you possibly can in answer to the questions on the form. Since your recoveries have been changed, your goal here is to show that you have data that only the real owner of the account could have. The more information you provide, the better the chances of getting your account back.
   
   
5. Submit the information and wait for Jagex to process it.

Understanding Keyloggers and Other Malicious Software (Malware) Typical Causes of RuneScape In-Game Password and Account Scamming