'Hijacking is the act of stealing someone else's RuneScape account. There are several major variations, most of which involve password scamming.
The Best Friend/ Boy or Girl Friend[]
This one is when the scammer pretends to be the victim's friend or Boy or Girl Friend. Then they eventually say something like "If you really are my friend you would tell me your password, I'll tell you mine." or "If you really liked me you would tell me your password, I'll tell you mine." They may also play off of the victim's emotions. The victim then states his/her password, and afterwards the scammer gives the victim a fake password. After the victim logs off, the scammer changes the victim's password. Due to updates that prevent players from saying any sentence that contains their password, scammers may instead ask players for their password backwards. Players who come across this situation should report the scammer using the 'Scamming' option under Honour.
Example[]
Scammer: "Buddy, we've been friends forever so I say we have a trust test" Victim: "ok, what do I do" Scammer: "I tell you my password and you tell me yours" (at this point victim should refuse and report but) Victim: Sure it's {insert password) Scammer: Cool mine is (insert fake password) Victim and Scammer log off. Victim attempts to log in later, but learns that his password has been changed by Scammer.
The Trickster[]
The scammer tells the victim something like "Hey if you say your password the filter blocks it out! See? ********". The victim, eager to test this, types in their password. The scammer then logs out and changes the victim's password. Due to updates that prevent players from saying any sentence that contains their password, scammers may instead say "If you say your password backwards the filter blocks it out!". Players who come across this situation should report the scammer using the 'Scamming' option under Honour.
The Hacker[]
This scammer hacks into victims' accounts by means of phishing sites, sending them keylogger viruses, Password Crackers, or simply guessing the victims' passwords. Players can avoid this happening by choosing a password with a secure combination of alphanumeric characters (as RuneScape passwords do not support special characters), the more the better. Any password that is a word in English, Spanish, French, German, or another common language should be avoided. In addition, players should also set a bank PIN and store all of their valuables before logging off. Finally, an anti-virus program, anti-spyware, and a firewall should also be included to prevent malware attacks.