Account Security

Hi,

long story short - had a user do a service on my account. Removed Authenticator and changed password before the accessed. Didn’t go so well and they decided to transfer a small amount of gold off the account.

Changed the password at this point and then accessed the account to see the damage. Stuff gone but whatever.

Took a short break, attempted to log back in again but stated the accounts already logged in. So the guy was back on again, dropping some more untradeables. This time I do an account recovery as I believe that logs them off (maybe I’m wrong). But appears I had forgotten to ‘end session’ for mobile which he had used to access.

okay no worries, hopefully no more issues. Watched a film, went back on to the account and it’s in the wilderness and he’s dropped or died with the defender I spent 30 minutes getting.

Losing the stuff doesn’t bother me, I find the situation a bit silly, and just laugh at it tbh - but I’m a little confused how he can still get on the account.

Anyone have any idea on things I could try?

 

Hmm, seems the guy who is doing it posted the answer for me a few days ago. How ironic:

Account association scams.