Credit Card Fraud – MMO Fallout

Having your account stolen in RuneScape just became a lot more dangerous. A very serious concern has arisen with regard to Squeal of Fortune, and Jagex’s method of keeping storage of user payment details. Jagex stores credit card information for recurring subscriptions, and uses that same card to purchase Squeal of Fortune spins. While the card number cannot be accessed, Jagex requires no extra information to process the purchase.

Squeal of Fortune is a grab-bag style mini-game where players can purchase spins (and receive them in-game) to have a chance at receiving rare equipment. If an account is stolen, there is nothing preventing the thief from doing very real damage by running up a massive bill through Squeal of Fortune. Why would someone do that with no real benefit to themselves, you might ask? Never question what a person might do to cause grief to another, especially over the anonymity of the internet.

The only way to remedy this for the time being is to head over to Runescape.com and remove your credit card from the account. Go to the main website, click on account settings, membership, and extend membership. You will see a list of payment sources on file, click “manage saved cards,” and there you will be able to delete the card off of the record.

Future membership purchases can be made with the option to not remember the card details. For players with the lower membership rate, there is a leeway when resubscribing where you will still receive your current rate. If the account is compromised and money is transferred, Jagex will not be refunding any money spent, legitimately or not.

With the on-screen PIN to prevent theft in the case that an account is stolen, RuneScape has more security around a player’s virtual bank than it does around the player’s actual bank.

(Source: Tip.It Warning)