Original Post — Direct link

[deleted]

13 days ago - /u/Jagex_Melora - Direct link

Hey u/Disastrous_Ad_2153

u/Friendlygymgoer is correct, there are a few different reasons we may lock accounts, but the most common is due to suspicious logins. Without knowing the specifics of the account in question it's hard to say for certain, but on the off chance that a hijacker had gained access to your account, I'd recommend doing a security sweep including:

  • Check your email is fully secure and not accessible to another person (I'd suggest 2FA for your email too) I'd also encourage you to review the inbox rules currently in place on your registered email address. If your registered email has been compromised, then a hijacker might have set up 'rules' which will redirect your incoming emails to another email address, meaning you might not be receiving important security information about your account.

  • Check your linked third party associations and remove any you do not recognise/secure your own third party associations.

  • Check your devices for any malicious software and run regular virus/malware checks.

In order to get you started on the best foot possible with your Jagex Account, I've included some security guidance below:

Your Jagex account is only as secure as your email is. As there is no manual recovery method for Jagex accounts, if you lose access to your email, you may lose total access to your Jagex account. Therefore, I'd recommend having 2FA set up on your email, as well as your Jagex account.

You need access to your email to access your Jagex account. Brand new emails set up purely for the purpose of your Jagex account are great from a security point of view, however it's worth keeping in mind that many email providers will close email accounts after a period of inactivity, so even if you only use it for this purpose, make sure you're checking it regularly. We have a list of the most common domain provider policies here.

Jagex accounts default to email 2FA. To be extra secure, change this to an app-based 2FA, save your backup codes somewhere digital and physical, and back up your authenticator, in case of a lost or damaged device.

Accounts are only as secure as the weakest access point. If you are planning to link a Steam account or Google account for SSO, ensure that these login methods also have 2FA. You can be as diligent as you like when it comes to your Jagex account, but if these don't have 2FA it's the equivalent of deadlocking the front door and leaving the back one open.

If you share or buy accounts, you do so at your own risk. A lot of contact we see around lost accounts are from people who historically received an account from a friend, or who purchased an account several years ago and the original owner has reclaimed access. My best advice on account sharing is don't.

Scams are becoming more and more sophisticated. We see a number of people come in to player support because of a spoofed Jagex email, ensure you're following all of our guidance related to phishing found here. Advice on general scams can be found here, but as a rule of thumb, if it's too good to be true - it probably is.

On top of all this, I'd recommend checking out our security centre for Jagex accounts, here.

Hope the above is helpful!