Welcome!

I'm not saying RM -did- hijack my account, I was curious to the procedure in place. And as for the password, it's a combination most people wouldn't even come up with since it's from a fob and only for OSRS.But if the code is checked twice over that's fine, that answers it.

Is there a process for checking the bots for malicious behaviour before/when they're posted? Only asking because I've had one of my accounts rinsed of items.