{Resolved}

I already attempted to report his scammer as posted here. Trying to bring some justice and also hopefully get back the 150m+ that Macho stole from me:
[RESOLVED]

Champ (Champ) responded on the first attempt and I completely understand his stance on this case due to the lack of apparent concrete proof. I would like to request that another moderator take a quick look in case they have any ideas on how I can bring this scammer to justice or if there is anything Champ and I missed in the already discussed details.

Here is the timeline of events, I'm sorry it's so long but I'll do my best to keep it simple as I don't want to leave anything that could help out:

1. Organized fire cape service from Macho (macho) at approximately 7:15 PDT on Friday, the 16th of March.

2. Changed the password of my account to a new password just for the service before he began, I absent mindedly changed it to the very unique password that is also used for the login email account. He completed the service within 3 hours and I was happy overall.

3. I changed the password on the account to a BRAND NEW very unique password immediately after the service had been completed. Forgetting that the email password and the given password were the same, I did NOT change the email password.

4. After a horrible ST Paddy's night I attempted to log in for some hungover runescaping at approximately 1:30 PM PDT on Sunday the 18th. The password was being shown as incorrect. Fearing the worst I went through the recover password process with Jagex. This showed me that not only did the password get changed but that someone had registered a new email account with this runescape account. My email starts with an "L" and is a Hotmail account. The information by jagex clearly shows that the new email starts with an "F" and is a gmail account. I do not own a gmail account other than one I use SOLELY for school.

Jagex screenshot here:
Imgur
Coincidentally, or maybe not, Macho's skype username and the email that it was switched to both start with an "F" and are both 11 characters exactly.

5. Panicking at this point I submitted the appeal on runescape. At the same time I noticed that someone had gained access to my email account attached to the runescape account (the email that shared the same password with the osrs account when I changed the password for Macho). I managed to find this as someone had deleted the following emails on my hotmail account but not realized that it is possible to recover deleted emails with hotmail. Shown in the screenshot below are the following:
a. At 10:21am (before I was conscious and during Macho's online hours) my hotmail account was notified that an unusual sign in of the account was detected (PM ME FOR THE IP IT GAVE ME PLEASE, the last couple of digits match a few of the results on an IP audit I did on Macho)
b. At 10:31am, just 10 minutes later (Probably the time it took to clean my bank), the email account was used to change the password of the runescape account.
c. At 10:32am, the email confirmed an email change of the runescape account.

Recovery of deleted email items here:
Imgur

6. After submitting the first report a scammer thread I finally managed to get into contact with Macho over Skype. I attempted to be reasonable asking if he perhaps had a worker doing capes for him that had decided to hack my account or if he perhaps had a virus. He was difficult to get answers out of but said that he was the only person doing capes and that he had no other issues with hacks. I then stated that it must be him who did it at which point he started off by ignoring the point before calling me a spammer and then BLOCKING me. Offering no explanation the entire time. The entire chat exchange can be seen here:

Imgur

Imgur

Imgur

Imgur

Imgur

7. Macho only ever responded to the report thread after Champ issued him a Dnt. Macho's only response was "how rude this dnt when i dind't hacked his account ". Again giving no explanation whatsoever.

8. Running virus scans by multiple different antiviruses I came up completely clean. None of my other emails (some with runescape accounts attached) with the SAME password were logged into. Based on this and the timing it leaves me to believe the only possibility is Macho, especially with his suspicious way of responding.



In summary, Macho was the only person to EVER know the password of my email account (As it was the same as the runescape account he used for a couple hours) or even that the email account existed. I HAVE AUTHENTICATOR ON THE ACCOUNT AND ONLY MACHO HAD THAT INFORMATION. The hack happened within 48 hours of his service and none of my other runescape accounts or emails were touched. I have the IP of the person who gained access to my hotmail account and I'm willing to bet Macho uses proxies but that one of his sythe logins matches this IP (Again please pm me for this). I have no viruses as I ran multiple scans which all came up clean, again nothing other than the only account Macho knew the info for was touched. I was not talking to an impostor as Macho himself never denied this and I used the skype button on his thread for the skype chat. My guess is that Macho is a legit cape seller but saw his opportunity and took it.

Please please please someone help me out here.

Thanks.

 

Feel free to PM me a picture of the IP that logged into your email @fezlet.

 

The IP you provided me with is a proxy and also one that is on your IP Audit. This can mean one of two things:
1. You're faking the email hijacking in an effort to extort @macho
2. Your account has been hacked and they have also logged into your Sythe (possibly how they got your information first, if you sent it through PM)

So i'm going to issue a DNT on your account until you have changed the password and email. You can do both of these here - Account Recovery & Creation

Staff can see deleted post below for the PM.