Scammed by a gold seller, what his goal?

I recently bought some OSRS gold from a website called Osrsplaza. At first, there was nobody available in the website's chat, so I left my Discord username instead.

Shortly afterwards, someone called capeservice1 added me on Discord. However, when I Googled the Discord name, I found an Inferno-related website associated with it, and that website had quite a few scam reviews.

Because of that, I wasn't sure whether the person was legitimate.

I decided to test him with smaller amounts first. I bought 50M, 100M, 200M, and eventually 500M. Everything went smoothly, and I received the gold each time.

After that, I wanted to buy another 1B, but he didn't have that much in stock. He told me he would look around and try to find it.

While we were waiting, he started explaining that the safest way to trade large amounts was apparently through a drop trade, with him logging into an account to perform the trade.

I have a combat 120 alt account that I wasn't particularly concerned about, so I told him he could log into that account to do the trade.

About 40 minutes later, he told me that he had managed to find 800M.

I paid him in full, gave him the account details, and told him I had to run an errand and would be back in about 10 minutes.

When I came back, he told me:

"I just remembered that the account has no value on it."

He explained that the account had only recently been made a member and had previously been F2P, so apparently there needed to be some value on the account before the trade would be safe.

He told me to change the password, put some value on the account, and then trade him in-game to prove that the account has value.

I did that.

Then he told me to hop worlds because he wanted to show his friend as well.

At that point, I immediately understood what I believed the goal was: he wanted me to log out while having around 2B in my inventory, so that he could potentially take advantage of the situation.

Instead, I traded the gold to my main account and hopped worlds.

He immediately told me not to trade the gold to my main, and said that he was recording the whole thing.

At this point, the whole situation became even more suspicious.

You might be wondering why he supposedly needed me to do all of this.

According to him, he had recently received an RWT ban and needed what he called "POW" — proof of wealth — to show his friend or whoever he was dealing with that he actually had access to the gold.

That's where I stopped cooperating.

I have since logged the account out of all active sessions, changed the password, and secured the account.

But now I'm wondering:

How does this scam actually work?

What was the end goal here?

I assume he may have logged into the account from mobile or somehow obtained a persistent login/session. But if I changed the password afterwards, would that actually kick him out?

Could he have linked another login method to the account?

Or was the entire point simply to convince me to log out while he had access to an account containing a large amount of wealth?

I'd really like to understand exactly how this scam works so I know whether my account is actually safe now.


The text has been made with chatgpt so it might contain lil errors

 

I found it out, they link a steam account so they can still login on the account after changing the password.

Kind of stupid you can link a steam account without email verification but hey.