A WARNING TO EVERYONE THAT RENTS OUT ACCOUNTS

Last week, a user in my livechat accused me of kicking him of an account that he was renting to stake. At first I thought he was trying to frame me to get a refund, but he told me he recorded his session. After watching the footage, it showed he got kicked off the account but he still could have framed it and I didn't know what to think of it: the only ones that knew the password of the account were him, me, and my worker.

I was 100% sure me and my worker were not in on it and as I started to talk more and more to this guy and I started to believe him aswell. I decided to take my website offline to stop renting out accounts to protect my customers and started to keep track of unusual logins into my accounts. There were none for almost a week, so I decided to double change all the passwords and put my website back online to rent out accounts again.

After 12 hours of being online again, we got a complaint of another customer that got kicked off an account again and claimed to have lost 250m. This made me very upset and I decided to contact sythe admins to see if they knew anything about this and talked to @TySimpson on Discord and he told me about social logins.

What are social logins you might ask?
People are able to link their Google account to your RuneScape account in your account settings. If their Google account is linked to your RuneScape account, they are able to login to your RuneScape account by simply using their Google account credentials on the OSRS Mobile App! These guys social engineered my customers into hopping worlds, so they could take over the account without knowing the password and steal their gold.

How to know if a social account is linked to your RuneScape account?

Login at the RuneScape homepage and go to account settings and head to 'Linked Accounts':



How it will look like if you have a Google account linked to your RuneScape account:



How it should look like:




Keep your customers safe and check your accounts' account settings for linked social account after each session!

 

Thank you for this information !

 

Wow this is good info

 

Hmm this can affect more than account rentals, account sells and buybacks could be changed because of this.

Is there a way to remove their social accounts / check to see if one is attached prior to reselling or renting an account?

@Limiq @Zora

@Stewie Thanks fam

Yellow Hat

 

Yes, you can check if your runescape account has linked social accounts by going to your account settings at runescape homepage and navigate to linked accounts. Accounts can very simply be linked and unlinked

 

Do you need access to the social media account to remove the link or can you do it simply via the account panel ?

YH

 

You can do it simply via the account panel

 

At least thats good to know haha

 

Thanks for the heads up!

 

Thank you

 

Thanks for the warning

 

Thanks alot.

 

Excellent

 

This just happened to us with a customer:
Discord = Vodka#1846
389115420613017600
He linked a google account to an acc of ours

 

Thanks for the advice!

 

Same user did it to me.

 

Thanks fella that's a handy tip

 

Appreciate you bringing this to everybody's attention

thanks!

 

bump so everyone sees