Security Alert

Signs Your OSRS Account Is Compromised: How to Detect Account Hacking

7 min read
Updated January 2024

Early Detection Saves Accounts

Account compromise can happen to anyone, but early detection is crucial for minimizing damage. This guide helps you recognize the warning signs and take immediate action to secure your account.

Warning Signs by Category

Account compromise can manifest in various ways. Here are the most common warning signs organized by category:

Login & Access
Warning signs related to login & access

Unexpected Login Attempts

You receive emails about login attempts you didn't make

Critical

Immediate Action: Change password immediately and enable authenticator

Can't Log In

Your password no longer works despite being correct

Critical

Immediate Action: Use account recovery immediately

Account Locked

Your account is locked due to suspicious activity

High

Immediate Action: Contact Jagex support for account recovery

Items & Wealth
Warning signs related to items & wealth

Missing Items

Valuable items are missing from your bank or inventory

Critical

Immediate Action: Check trade history and contact Jagex support

Unexpected Trades

You see trades in your history that you didn't make

Critical

Immediate Action: Review all recent trades and report suspicious activity

Gold Missing

Large amounts of gold are missing from your account

Critical

Immediate Action: Document the loss and contact Jagex support

Account Changes
Warning signs related to account changes

Changed Settings

Account settings have been modified without your knowledge

High

Immediate Action: Reset all settings and change your password

New Friends

You have new friends or messages you didn't add or send

Medium

Immediate Action: Remove suspicious friends and check your message history

Email Notifications

You receive unexpected emails about account changes

High

Immediate Action: Don't click email links, log in directly to check

Behavioral Indicators
Warning signs related to behavioral indicators

Unusual Activity

Your account shows activity during times you weren't playing

High

Immediate Action: Check login history and change your password

Different Play Style

Your account shows activity inconsistent with your play style

Medium

Immediate Action: Monitor account activity and secure your account

Location Changes

Your character is in locations you didn't visit

Medium

Immediate Action: Check recent activity and secure your account

Immediate Response Checklist

If you notice any warning signs, follow these steps immediately:

1

Change Your Password

Use a strong, unique password immediately

Critical
5 minutes
2

Enable Authenticator

Add two-factor authentication to your account

Critical
5 minutes
3

Check Account Activity

Review login history and recent trades

High
10 minutes
4

Contact Jagex Support

Report the compromise and request account recovery

High
15 minutes
5

Secure Your Email

Change your email password and enable 2FA

High
10 minutes
6

Scan for Malware

Run a full antivirus scan on your computer

Medium
30 minutes

How to Check for Compromise

Regular monitoring helps you detect compromise early. Here's how to check your account:

Account Activity
  • • Check login history in account settings
  • • Review recent trades and transactions
  • • Monitor bank and inventory contents
  • • Check friend list for unknown additions
  • • Review message history for unauthorized messages
Security Settings
  • • Verify authenticator is still enabled
  • • Check if password has been changed
  • • Review account recovery settings
  • • Check email notifications for changes
  • • Verify account settings haven't been modified

Prevention Tips

The best defense is prevention. Here are essential security measures:

Use Strong Passwords

Create unique, complex passwords for all accounts

Critical
Enable Authenticator

Add two-factor authentication to your RuneScape account

Critical
Use Safe Clients

Only use verified, safe clients like RuneLite

Critical
Monitor Account Activity

Regularly check your account for suspicious activity

High
Secure Your Email

Protect the email associated with your account

High
Be Cautious Online

Avoid suspicious links and downloads

Medium

What to Do If Your Account Is Compromised

If you confirm your account has been compromised, follow these steps:

  1. 1. Secure Your Account: Change password and enable authenticator immediately
  2. 2. Document Everything: Take screenshots of suspicious activity and missing items
  3. 3. Contact Jagex Support: Report the compromise with evidence and request account recovery
  4. 4. Check Your Computer: Scan for malware that may have caused the compromise
  5. 5. Monitor Your Account: Watch for any continued unauthorized access
  6. 6. Review Security: Strengthen your security measures to prevent future compromise

Recovery Timeline

Understanding the recovery process helps set realistic expectations:

Immediate (0-24 hours)
  • • Secure your account
  • • Report to Jagex
  • • Document evidence
  • • Scan for malware
Short-term (1-7 days)
  • • Jagex investigation
  • • Account recovery process
  • • Security improvements
  • • Continued monitoring
Long-term (1-4 weeks)
  • • Item recovery (if possible)
  • • Account restoration
  • • Security audit
  • • Prevention measures

Common Causes of Account Compromise

Understanding how accounts get compromised helps you avoid these risks:

Common Causes
  • • Using malicious clients like Storm Client
  • • Weak or reused passwords
  • • Phishing attacks and fake websites
  • • Malware on your computer
  • • Sharing account information
  • • Using public computers
  • • Falling for social engineering
Prevention Measures
  • • Use only safe, verified clients
  • • Create strong, unique passwords
  • • Verify website URLs before entering credentials
  • • Keep your computer free of malware
  • • Never share account information
  • • Avoid logging in on public computers
  • • Be skeptical of suspicious offers

Conclusion

Early detection of account compromise is crucial for minimizing damage and recovering your account. By knowing the warning signs and taking immediate action, you can protect your valuable RuneScape progress.

Remember: prevention is always better than recovery. Use strong security measures and safe clients to protect your account from compromise in the first place.

Need More Security Information?

For detailed security analysis and protection guides.