So yesterday, after months of saving, I had enough cash to get my first rare - a blue h'ween mask. I was extremely excited, and spent a large portion of the day walking around and showing it off. So this morning, I log onto RS, and as soon as I do so, I get a message from someone I have never met before saying "are you still selling blue mask?". This immediately sets alarm bells ringing. I always bank my invent and worn equipment before logging, just in case. I go to check my bank and...almost all valuables are gone. Bandos, fury, zerker ring, d pick, and most importantly, and sadly - my coveted mask. All I had left was a couple of Barrows sets and a d hatchet further up in my bank which the hacker appeared not to have noticed/wasn't worth their time. I am extremely pissed off. I have spent at least 6 months working towards this goal, and to have it all taken away over night is extremely disheartening. Yes I had a bank pin, and security questions. What is seriously worrying me now though, is that my password was a rather long string of numbers and letters - in other words impossible to guess. Neither is it written down anywhere. I have Norton 360 (latest version) and this has turned up no threats. After running a full system scan - still clean. I then purchased another, more expensive security software, which also ran a full system scan which turned up clean. I have had to ring my bank and disable internet banking - which is extremely inconvenient - all because this piece of scum wants some free e gp's. Though I am not quitting runescape as such, the thought of all those wasted hours makes me sick - I have absolutely nothing to show for it. Hell, I could have learnt a language in that amount of time. I look back on the hours I have spent working towards this, and I think to myself, why? How has this bettered my life at all? Sure it was fun to begin with, but due to the limits of a browser based game or Jagex's incompetence, Runescape is a highly repetitive and often boring game. I did not particularly enjoy 80% of the time spent working towards my mask - I did it because I thought to myself that it would be worth it once I had achieved my goal. And it was - for 24 hours. At the moment, even logging on makes me feel extremely angry with whoever did this. I may play Runescape more casually in the future, but I certainly won't play as much as I used to - what if I spend another six months working for something, only for it to be taken away by some jackass? What if the idiot actually changes the password this time (lol) and keeps the account? This is the problem with e achievements - they are by nature not physical posessions, and the majority of humanity couldn't give a [cabbage] about them. Which means there is very limited - if any - liability for their theft. Though Jagex has only limited responsibility for this - the scum of society are there for a reason after all - I honestly think the recovery process needs to be changed. Even with incredibly secure passwords now, due to the way recovery works, so long as you have had an easy to guess password at some point in your RS career, your account can be recovered with relative ease. Overall, this experience has soured Runescape for me - I took every precaution, but still lost my account. Why should I bother again? TLDR: (courtesy of Jeremy) - got hacked, lost about 250-270m bank, feeling pissed off. Jagex needs to improve recovery system.