That doesn't mean it's scammed. Runescape implemented a new thing where if an account logs in to a different I.P they send an e-mail to you to verify the account is yours so it does not get banned.