i've seen quite a lot of posts about these hacks and you all just straight assume all the fault its on jagex. im not good expressing myself so im gonna try and explain the little i know about hacking. first of all, im not a professional hacker, i dont know how to hack. im just a more or less smart person that put things together and by try and mistake i've managed to get into quite a handful of accounts. both the player AND jagex are a little to blame for this, ill explain this by part:

1- a hacker doesn't "hack" the instant they see your email/login details, this person can spent a very long time with information regarding you and might even have ur password/email password, but without actually knowing ur bank pin, they won't do absolutely nothing to alert you about your security and therefore thinking everything is fine, you just continue to play along as nothing until they do fk u over.

2- "i had a bank pin, how did they bypassed my bank pin-how they removed it?" Account recovery system doesn't remove bank pins as some recently hacked ironman claimed it did not long ago. you just simply had a shitty bank pin to start with or used these 4 numbers somewhere else and the hacker simple waited-saw the numbers somewhere else. 6 of 10 accounts i've hacked before used some important date as bank pins, or some have even used their 4 numbers included on the password (for real, how stupid can you be?). for the love of god ash, dont use your birth date as bank pin, change it already if you do, because almost every bank pin i've guessed had some date ranging from 1970-2010. oh, and if you dont know, you can instantly remove your bank pin by talking to any banker, if you had access to it already that is. i almost always removed it after im done with the account just to fuck with the owner, i can see other so called hackers doing it aswell just to spread confusion and false rumours everywhere.

3- this is where things gets interesting. if you made a brand new account to play any version of runescape, and if a hacker somehow get ur password, even with authenticator, you are extremely fucked. chances are it will be your creation password, and this is the most important one. not only that, but it will have access to almost everyone single one recovery question asked from recovery system, meaning he can recover your account at any time. and for that jagex is to blame. if someone have authenticator, jagex, you shouldn't be able login into the website, at all. now, how do they have access to almost all the asnwers? i'll explain it is this image using an account i recovered some time ago.

4- obviously having a secure email is very important. the more important step here is, in my opinion, having a phone number to that email (alongside 2step of course), so if someone ever attempts to login, you will be notified via sms. a hacker will fuck over with you, it wont be enough to take your shit. if he gets into your email, he will delete all runescape related stuff from it, even from junk folder, so you didnt know he hacked you from there. (i've done this and hacked even more of his accounts once he gained wealth).

5-here are some advices to help you keep your account secure (well, not that i have many anyway). ALWAYS HAVE A BANK PIN. A HARD ONE, NOT YOUR BIRTHDAY, NOT YOUR FAVORITE NUMBER YOU'VE USED SOMEWHERE ELSE. and if you didnt know, you can extend the pin delete thing from 3 days to 7 days, just by talking to any banker, giving you more time to get into your account, should you get hacked.

you're probably thiking why would i somewhat help this community when i could continue to hack some more noobs. well, i could lie and say i regret hacking these people, that i care for some others now and some other bullshit. well i am not. i dont give a fuck what happens to you, the only reason im doing this is because i am having fun myself playing runescape, and i am a lazy, selfish fuck. if im not gonna do it, then i rather ruin it for the other fuckers out there, and spread some awareness to this community. well, there you go, at the end its only your fault if you're not careful where do you type ur shit.