First of all thank you all you guys for the help, I changed my account to a new email and changed my passwords and recovery questions, at least for now my account is safe. As for your Suggestion D_V_Devnull, when I actually asked for the change of address email I noticed a subtle; but important difference, the first email has http: while the one I asked for was https Had I not decided to check in the real Runescape Homepage I probably would have fell for that email :ohnoes: