As with all other online games there will be people out there that want to get ahead by tricking and taking advantage of other players.
Scams are based upon tricking another player into losing valuable items or gold. Hacking has a completely different objective and severity of loss. Hacking involves a player's account being stolen, not simply a player cheating another player.
The simplest advice on avoiding being taken advantage is this:
- If something seems too good to be true, then probably is.
- Never give your password out to anyone. The only entity that will ever need your password is the Runescape website.
 Giving Out Passwords
Players must never give out their password. They must keep their password safe. They should not tell it to family, friends, or anyone else.
An untrustworthy friend or a family member may use the password on the player's account and steal all their belongings.
Remember, never give out a password. A password is meant to keep something safe. It should not be told to people.
It is also a good idea for players to check behind them if they are in a public place to make sure that nobody is looking at their computer. People have been known to lose their accounts because someone saw them type in their password.
Scamming in RuneScape involves a player cheating another player. This is a very common thing that happens everyday. However, scamming can be easily avoided if you know what kinds of scams to look out for.
 Known types of scams
There are many different kinds of scams in RuneScape. Many players fall for these scams, though they can easily be avoided.
 Quick switch
A player is buying a rune platebody. Another player trades them and puts up a rune platebody in the trade window. The player buying then puts up 80,000 gp. Both players hits accept, but the player buying doesn't look at the second trade window. They hit accept immediately, and then complete their trading. The player that bought the plate looks in his inventory only to see an adamant platebody. They were just scammed.
This is the most common scam in all of RuneScape. However, players can easily avoid this simply by being patient and observing the trade window.
When a player trades another player, a trade window will appear. In this window, players can put up their items that they will want to trade. Both players can see what items are being traded. When both players click the accept button, a second trade window appears. In this window, players can see what they are trading in words. This is where players can check to see if they are being scammed.
In the second trade window, players must read carefully what they are trading. All a player has to do is be patient and read the second trade window to make sure they are not being scammed.
If a player is scammed by this, they simply have to use the "report abuse" button and report the player for breaking Rule #2.
Note: This can also be done with coins being switched from something such as 200K to just 200.
 Buying Items at High Prices
A player will be buying rune essence for 800 gp each rather than the common 30 gp each. A player will notice this great deal and trade the buyer. The player selling the ess will put up 1,000, and the buyer will put up 800,000 gp. The two players click on the accept button on both trade windows and complete the trade. However, when the buyer looks at the 800,000 gp they made, they notice that they only received 8,000 gp.
This is a very serious scam, but can be easily avoided. Players must carefully watch the trade windows to make sure they are receiving the correct amount of money or item.
Players who are buying items at high prices are usually scammers. If they are scamming players, they can be reported for breaking Rule #2.
 Armor Trimming
The armor trimming scam is an old one, but people still fall for it every once in a while. Some players may see other players saying that they can trim armour. The scammer will say something along the lines of "Free armor trimming" and wait for someone to trade them their armor then log off. These players are most commonly found in Varrock and Falador, a majority of them on free worlds. However, trimming armour is a scam.
It is impossible for a player to trim another player's armour. Some players say that they can trim armour because they are a member. However, this is also not true.
Trimmed armour can only be gained from doing treasure trails, a mini-game that members can do. When the member has completed the treasure trail, they will then receive a random reward. The reward will sometimes be trimmed armour.
This is a scam and can be reported using the "report abuse" button. The "report abuse" button is located beneath the chatbox. When a player sees another player saying that they can trim armour, they are recommended that they use the "report abuse" button and report the player for breaking Rule #2
 Gem Cutting
Some players may say that they will cut other player's gems for free. While some honest players may cut gems for free, many players will be greedy and steal the gems they receive.
Players are recommended that they raise their crafting level up to cut their own gems so that they won't be scammed.
If this scam happens, players can use the "report abuse" button and report the player for breaking Rule #2.
You can just do a direct trade of Cut for Uncut. That way, NO ONE is scammed. You can also do that with other items, like say Rannar Weeds and Snape Grass for Prayer Potions, that works all the time. Using the Assist System is another way players can cut gems, without needing to trade the gems to another player.
 Alt F4
This scam involves someone saying to drop your items by saying that if you drop your items and press Alt+F4 it will double them or do something of the like. The only thing this will do is drop your items and close your active window, usually Runescape. By the time you log back in, you'll have lost the items and the scammer will have picked them up. With an update in 2007 Dec this was changed, so that all valuable items dropped (more than 3000 gp) are made invisible to other players.
 Trust game
This scam starts off by saying who wants a very rare item. (ex. Rune platebody) then they'll tell you to do three things. the first and second are easy to do(like dance)then at the last thing they'll ask you to give them your best stuff and you will trust them to give it back. The person who gives the best stuff gets the prize. This is most likely a hoax to scam you. They some times they do give your stuff back and gain your trust so you can keep on giving him stuff until he scams you.
 Edgeville Scam
Players may private message other players saying that they are selling something rare at an incredibly low price. The player selling will want the player buying to come to Edgeville's wilderness. When the buyer gets there, they will enter the wilderness with all their money and trade the seller. The seller will then get a friend to kill the buyer, or kill the buyer himself if the buyer's level is close enough to theirs.
It is very simple to avoid this scam. Do not trade in or around the wilderness or near Edgeville.
 Two person trade scam
A buyer is offering way over the odds for an item which is not incredibly rare.
A seller not too far away is offering the item at a lower price, but still considerably higher than the going rate.
They are in league and you will be left with an unwanted item at an excessive price. The way to avoid this scam is to know the prices, and never buy an overpriced item, as even if the trade did turn out to be legitimate, you could be beaten to it.
 Selling Rare Items
A player may be selling an item that they are saying rare. However, they may be lying.
 Avoiding scamming
Players can easily avoid being scammed by following these points.
- Take time trading. Observe the items the other player is putting up.
- Always look at the second trade screen.
- Never fall for the "trimming" scams.
- Be wary of trades near Edgeville or the Wilderness.
- Be wary of trades with people offering very high prices.
- Know the items involved in your trade.
 What to do when scammed
If a player is scammed, the only thing they can do is work to get the items they lost back.
JAGeX will not give players back the items they lost. Many players turn to JAGeX when they get scammed. However, JAGeX will only say that there is nothing they can do. They do not give items back because people would take advantage of getting free items.
If a player is scammed, they should raise their skills to get money or merchant some items. In time, the player will be able to get back their items. What is important is learning to never fall for the scam again and trying to prevent others from making the same mistake.
In runescape, people refer to password thieves as hackers. Although there are a few people who literally hack your computer through a trojan with a keylogger, that usually never happens
Hacking in RuneScape involves a player entering another player's account. This usually happens when the player has visited a site with a keylogger or they had given out their password. This is a very common thing that happens everyday. However, this can be avoided. There are easy steps that can be taken to keep a player's account safe from being hacked.
Players can only be hacked when they are not playing their character. It is impossible to be hacked when the player is still playing.
 Known hacking methods
Some websites are not safe for players. While some sites may look secure, many are not.
 RuneScape Wannabes
Some websites may claim that they are RuneScape and look very similar to the site. However, if the player looks at the address bar, they will probably see something wrong with it, such as instead of saying http://www.runescape.com, it might have more words or letters.
 Fan Sites
Some fan sites are not safe as well. There have been security issues with some fan sites, where players have been able to hack these websites and put viruses or keyloggers on them. It is best to run a virus scan or adware/spyware scan after visiting a fan site.
Players should never follow a link that directs to RuneScape. They should only bookmark the site on their own, not use another site's link to RuneScape. Clicking on another site's RuneScape link may contain a keylogger. Keyloggers are viruses that go into the player's computer and will record everything they type. The information is then sent to the creator of the keylogger. If the player types in their account name and password on RuneScape's official site, the keylogger will log it and send it to its creator. The keylogger's creator will then go to RuneScape, enter the player's account name and password, and go on their account, stealing all their belongings.
If the player is using a fan site forum, they should not use their RuneScape username or password on that site. Players should use a different account name and password whenever possible.
 Password block
Some players will say that JAGeX has made an update that allows players to not say their password or that the censor blocks player's passwords. this is very true.
The player may say, "Jagex blocks your pass! ******* see?". A player's password will be censored. One day I tried to tell a friend my name and so i typed it in and it wouldn't work. That's because i use my name as my password. If a player does tell their password, then they are only asking to be hacked. If you ever do accidentally tell someone your password of suspect they already know it, change the password as soon as you can.
Players doing this scam can be reported. A player simply has to click on the "report abuse" button and report the rule breaker for breaking Rule #3.
 JAGeX Impersonators
JAGeX is the company that makes RuneScape. Some players will claim that they are JAGeX staff or that they know people who work for JAGeX and that they can give you something if you give them your password.
The scammer tends to offer one of 3 various things:
- Free items.
- A free membership.
- A swift banning if you do not comply.
However, this is always a scam. JAGeX staff will never contact players in the game. NEVER use your password on any website except the runescape login page. Don't use it anywhere else, not even on another website account. They will only contact players using the message center. Also, JAGeX staff members always have a gold crown beside their name and most of them have the word Mod before their name.
If a player sees another player doing this, the player can be reported for breaking Rule #5.
 Emails from JAGeX
Players will never receive an email from JAGeX.
JAGeX will never send players an email. This is said all over RuneScape's website so that all players will know.
If a player does receive an email from JAGeX, it is a player trying to hack accounts and must be deleted right away. All of these emails have keyloggers and will steal the player's password.
JAGeX will only send players messages through the message center, which is located on RuneScape's website.
 Preventing hacking
There are very simple rules that can be followed to protect a player's RuneScape account as well as their computer from keyloggers and other players.
- Players must never give out their password. If a player does this, then they are only asking to be hacked.
- Make a hard to guess password. Try making the password contain letters, numbers, capital letters, and symbols, such as aBc123?!?. A password with letters, numbers, and symbols is much, much harder to guess with a program than a password with only letters.
- Players should change their password often. Once a month is recommended. However, players should not change their password on a non-secured public wireless connection or a connection. Doing so can not only get the player's RuneScape password hacked, but also other player's passwords as well. So if the player is using an unsecured public wireless connection, they should not change their password until they use their own internet connection.
- Players should try to not use their password on other sites. Try making many different passwords and keeping them somewhere safe in case the player forgets them.
- Players should run a virus scan or a adware/spyware scan on their computer once a week. This is the easiest way to not get hacked. An excellent program for this is Hitman Pro, which not only checks for spyware but for all kinds of invasive programs.
- Some sites are unsafe. Some fan sites and pornographic sites contain keyloggers, so if a player visits them, they should run a virus scan or adware/spyware scan after visiting these sites.
- Players are strongly recommended that they set recovery questions. These can be accessed on RuneScape's main website. Players enter 5 questions about them that only they would know. It is best if you make questions that only you can answer, not your friends, family, etc.
- Players must never download auto programs. These programs as well as the sites always have keyloggers.
- For a web browser, use Mozilla Firefox or Opera instead of Internet Explorer. Many viruses are made for Internet Explorer because it is the most common browser used, there aren't as many viruses for other browsers.
- Players are strongly recommended that they set a bank PIN. This personal identification number can be made when they go to a bank. The player has to talk to the banker and ask about a PIN number. The player can then make a four number password for their bank. This PIN can be hacked from keyloggers that make Screen shots in the right time, but it's safer then without. It is almost impossible to be hacked if a player uses a PIN.
 What to do when hacked
JAGeX will not give players back the items they lost. Many players turn to JAGeX when they get hacked. However, they do not give items back because people could potentially take advantage of getting free items.
If a player is hacked, they could raise their skills and sell the produce. In time, the player will be able to afford new items. The problem is when players get rare items like event items stolen, still they will not be refunded so be very careful when dealing with these items.
 Auto Programs
Many players cheat on RuneScape and use a program that does the work for them. This is against RuneScape's Rule #13.
Some sites allow players to download and use auto programs. These sites sometimes have keyloggers. The programs also sometimes have keyloggers.
Players must exercise caution when visiting these auto program sites.
- Autoers usually have default clothing and odd names. They are also usually level 3.
- Not everyone thats level 3 is an autoer. Sometimes you may find a level 3 skill pure.
- Autoers follow a very specific path. Unless they have an anti-random exploit in them, they'll be killed when they receive a random.
EXAMPLE: Macro: *Starts chopping*
Tree Spirit: Leave these woods and never return!
Macro: *Keeps chopping and dies*
Real_player: *Reports Macro*