Was someone trying to hack me?

So just about 2 hours ago someone added me wanting to buy 07 from me, he was saying he was hacked last week so he was buying gold and asked me if I was able to sell

I said yea, and he said he was fine going first and asked for email, he got my email and then asked if it was verified and i said yeah (I'm assuming he said this because if it was verified with my actual email theres a likely chance my paypal email was going to be my runescape acc email which it isn't anyway)

He said he wasn't able to buy and i talked him through how btc worked and he said he'll buy some btc, he went and ''bought btc'' and messaged me 30mins later asking if he could see the 07 before sending and i said sure and he asked if i was a member i said no and he was really interested in my last membership status and how i got it, i was worried at this point he was trying to recover my account so i xferred my gold to an unknown account which has 2fa and a random login just incase. I said to him i paid with prepaid cards for members and he asked do you not buy members now i said no and he asked when the last time i was a member i just ignored

20mins someone else adds me asking where i live like country and city saying he knows someone close to me and i said somewhere like the other side of the country

he has my email which isn't linked to my rs acc anymore just out of safety i won't use the account anymore

I've a feeling they were both the same people what do you think? Was he trying to hack me or am i just being really security cautious? I've heard a lot of hackings can be with small details like this and the questions he asked seemed unnecessary so i made a lot of it up

 

Its quite obvious that they are trying to recover your account. Dont give out information like that. I dont understand why you would you even tell them anything.

Additionally, this doesn't belong in Security Discussion. Security issues are about bugs and exploits, not social engineering. You can post this content in a help section or the RS discussion sections.

 

SE is a big part of Information Security. I don't see why a topic like this shouldn't be allowed here.

 

Yes, he was gathering information to attempt a recovery.

 

The problem being: people are always posting about their accounts being hacked and asking what to do. When it comes to se, it's almost always focused on their own accounts rather than discussing se itself. It's much different when threads discuss bugs and exploits, when people are much more concerned with the actual security issue.

There's a fine line between being concerned with the consequences of the security issue and actually wanting to discuss the security issue. IMO, I would hardly consider this a discussion of security. It should belong in a help section.

 

yeah pretty obvious.

 

Social engineering.


He was going to to attempt to revert your hotmail account.

I used to routinely hack peoples hotmails by the revert method, sending emails. obtaining IP's then sending this information in to process then unlock the account.

Pretty much all useless nowadays if you have 2step verifiction on your hotmail, paypals, and runescape accounts.