"What account" is a clear constitution of guilt.
Depends how you look at it, maybe he was too lazy to write the sentence more formally, like:
"Which runescape account is yours, I'll check to see the progress I've made so far"
Why else would he follow it up with "rsn?"
-------------
I mean this whole thing is a bit silly. The guy is a March 2011 join date to begin with so if you trusted him it's your own fault. Secondly it's 4.5m and you're talking about involving the law lol? So far this guy hasn't even scammed you if he said 2-3 days and it's only been one.
I didn't see you post this but I'm assuming he was not supposed to change the password? If he did then I still wouldn't get too upset just yet. Even if he tries to take it you will be able to recover it and worst case scenario you lose 4.5m, no big deal





