I can recommend a few steps, although most are outlined on our website so it's more of a personal recommendation.
Someone constantly attempting to reset your password would push me towards believing that they have or have had e-mail access in the past. Keeping it somewhat in the order of what I recommend, I'd do the following if it were my account.
For whichever e-mail provider you use, I would Google "inbox rules" and make sure you have none enabled on your e-mail account. I would then look at e-mail forwarding and make sure that there are none you do not recognize. Hijackers tend to apply one of the two mentioned above as it means that they can still technically access your e-mails without having access to your e-mail account.
Once you've confirmed that none of the above are true, I would log into your account on the Runescape website and look at "linked accounts". Make sure there are none there that you do not recognize. People link Google or Steam accoun...
Read more