How to Check If Your RuneScape Account Has Been Compromised
Step-by-step guide to identifying if your OSRS account has been accessed by unauthorized users and what to do about it.
If you've used Storm Client, Allure plugins, or any suspicious third-party software, your RuneScape account may be compromised. Here's how to check and what to do about it.
Warning Signs Your Account Is Compromised
1. Missing Items or Gold
The most obvious sign - check your bank and inventory for:
- Missing valuable items
- Depleted gold stack
- Items you don't recognize (traded items)
- Empty equipment slots
2. Unusual Login Activity
Check your account's login history on the Jagex website:
- Logins from countries you've never visited
- Login times when you weren't playing
- Multiple failed login attempts
- Unusual IP addresses
3. Changed Account Settings
Look for unauthorized changes to:
- Email address
- Display name
- Authenticator status
- Bank PIN
4. Suspicious Trade History
Review your recent trades in the Grand Exchange and player trades:
- Trades you don't remember making
- Items sold for suspiciously low prices
- Large gold transfers
Immediate Actions to Take
Step 1: Change Your Password
Go directly to the Jagex website (not through any client) and change your password. Use a strong, unique password that you don't use anywhere else.
Step 2: Enable Authenticator
Set up two-factor authentication immediately. This prevents unauthorized access even if someone has your password.
Step 3: Set a Bank PIN
If you don't have one, set a bank PIN. If you do have one and suspect compromise, change it. Note that PIN changes have a 3-7 day delay for security.
Step 4: Contact Jagex Support
If you've confirmed unauthorized access, contact Jagex support immediately with:
- Details of what was taken
- Approximate time of compromise
- Any suspicious software you used
Prevention for the Future
- Only use trusted, open-source clients like RuneLite
- Never share your password or authenticator codes
- Be suspicious of "too good to be true" plugins
- Keep your computer's antivirus updated
- Use unique passwords for gaming accounts
What If Nothing Seems Wrong?
Even if you don't see obvious signs of compromise, if you used Storm Client or Allure plugins, your credentials were likely stolen. The attackers may be waiting to use them later. Change your password and enable authenticator as a precaution.