Solved

Solved

 

It is possible the email adress is spoofed as in not a legit email.

Hoover over the link and see what that adress is.

Your email could be compromised, if ur using a gmail, check the previous IPs on the login list. Account has been tried logged in using a different IP than yours several times for the system to lock it that easily. I suggest removing the wealth off ur acc if you have alot for a few days and see how it goes.

 

I just did more research and it is not a spoof as far as I can tell. The mailback path is to bluehornet, which is who Jagex uses. I just noticed I received a reset request twelve days ago as well that was not of my doing. How could that be? Again, I’m confused because don’t you have to sign into the account on runescape.com to send a PW request?

If that’s the case then someone has access to my OSRS password, but not my gmail password I guess?

 

Very weird case indeed.
I'd reset all related passwords and make sure both rs login and email login are set with 2fa

 

Yep. Going to do just that when I get home from work today. Email doesn’t have 2FA so need to do that now.

 

Stay safe buddy and gl

 

Hey iGotOwned,

you don't have to login to request a password change. For example it would be enough if I knew your Login E-Mail. Then I would just go and hit "Cant login" then Forgotten password. After putting in the login E-Mail it will automatically send a password request change to the E-Mail adress that is set. Then I have the option to either click the link in your E-Mail to change the password or hit "I dont have access to that E-Mail" then I'd need to fill in the recovery details.

So the simple answer is: You having a password request change means that someone is trying to recover the account. (which would make sense since you've stated that you bought the account.)

 

Dude, awesome response. Thank you so much for the definitive information. I have all personal info for the seller (including license pictures, etc.) I texted him today and he swears up and down it wasn’t him, and that if he did try to recover he could have the account in a second because he is O/O with the original email, etc.

So let me ask you this: It SOUNDS like he attempted to recover. However, I never lost access to the account if he sent a recovery request. Does this mean his attempt failed?

 

No problem mate And yes this means the recoverie attempts failed.