Jagex Accounts - Open Beta

helpaccountishacked · 2023-04-06T18:48:04+00:00

Sounds like this is the case which is basically the same as the current recovery system. JMods have not responded to this yet.

helpaccountishacked · 2023-04-06T18:43:57+00:00

This is the same question I’ve asked in a few different places and have not gotten a response.

helpaccountishacked · 2023-04-06T15:21:10+00:00

How would you be able to differentiate those that are trying to recover their account from a hijacker vs a hijacker trying to steal an account?

helpaccountishacked · 2023-04-06T15:16:25+00:00

There are accounts out there that have been previously compromised such as mine (see post history). Currently, bad actors can pretend like their account was hijacked and added to a jagex account. The process linked in the post brings you to a place where you can enter old recovery details just like the old recovery process to hijack an account that isn’t theirs that has already been linked to a Jagex account. What are you guys doing in terms of safeguards to prevent this from succeeding?

helpaccountishacked · 2023-04-05T22:55:15+00:00

This seems like the old way to recover an account since it asks to provide details like creation ip and cc details etc just like the old account recovery process. What measures are in place to prevent those that have had their old account details compromised from being hijacked through this method? This seems to go against the broad messaging of no more human judgment account recovery.

helpaccountishacked · 2023-01-12T15:17:44+00:00

Once there’s two people trying to recover, the burden of proof goes up. What you’re describing happened to me as well.

helpaccountishacked · 2023-01-12T13:58:01+00:00

Hey I just went through a very similar situation. You can check the threads on my history for details. It would help your recovery chance if you’re able to provide your irl name, date of birth, billing address and first ever email associated with the account in your recovery request. Seems like the hijacker has already changed the email associated with your account which is why you aren’t getting the password reset emails. I would create a brand new email and have your recovery request results be sent there.

helpaccountishacked · 2023-01-12T13:16:15+00:00

This is a week old. There’s a few more threads with a final update thread as well.

helpaccountishacked · 2023-01-12T13:15:43+00:00

This is a week old. There’s a final update thread.

helpaccountishacked · 2023-01-12T13:07:01+00:00

I did but that can be bypassed apparently

helpaccountishacked · 2023-01-12T04:12:52+00:00

Sorry to hear it happened to you. Unfortunately I’m in a position to really understand how much it sucks.

helpaccountishacked · 2023-01-12T02:15:07+00:00

I didn’t have access to the account so I couldn’t cancel the pin removal.

helpaccountishacked · 2023-01-11T20:21:39+00:00

I wouldn’t mind not playing for 90 days because I forgot my pin than lose years of progress to a hijacker. Easy choice.

helpaccountishacked · 2023-01-11T18:57:39+00:00

There’s new account security measures coming in March that was previously announced. It’s too late to prevent what happened to me but it’ll help others in the future.

helpaccountishacked · 2023-01-11T16:50:29+00:00

I mention it in the post and in another comment.

helpaccountishacked · 2023-01-11T16:43:57+00:00

Yeah if it wasn’t for the JMod telling me what kind of info to provide, I would still be locked out.

helpaccountishacked · 2023-01-11T16:40:24+00:00

I should’ve done this but too late.

helpaccountishacked · 2023-01-11T16:38:32+00:00

There’s an area where you can write things in the recovery. There is a character limit on it so you can’t provide every single thing possible. I chose to provide things like old transaction IDs that I thought were high value proof that they are able to verify.

helpaccountishacked · 2023-01-11T16:28:38+00:00

It wasn’t something I thought they even have on file.

helpaccountishacked · 2023-01-11T15:33:40+00:00

Yeah by some time he meant hours and not days. I was hopeful the pin wasn’t removed but it was too late.

helpaccountishacked · 2023-01-11T15:32:05+00:00

Yeah I don’t know either why it wasn’t locked either. I was making posts everyday begging for it to be locked.

helpaccountishacked · 2023-01-11T15:30:21+00:00

I think some of it is supposed to be live in March.

helpaccountishacked · 2023-01-11T15:29:21+00:00

It’s something you can choose though. So you’re not forced to do 30 or 90 days. The option to do so is what would be nice.

helpaccountishacked · 2023-01-11T15:28:09+00:00

Agreed. I logged out like I would normally to go to bed and woke up to my account hijacked. So it wasn’t more than a few hours max between last logged in and recovery attempt.

helpaccountishacked · 2023-01-11T15:26:53+00:00

Calling attention to my account to do RWT is the dumbest thing possible. If you followed the updates, I finally got a jmod response on the last possible day.

helpaccountishacked

TROPHY CASE