Mod Jed’s Sentence Makes OSRS Account Security a Legal Issue

The nightmare is not losing a duel or misclicking a trade: it is logging in to find a bank stripped, recovery details changed, and no obvious way to prove what was yours. The Mod Jed case matters because the court treated Old School RuneScape gold as property under the Theft Act 1968, putting virtual-item theft in the same legal category as theft outside the game.

At Cambridge Crown Court on September 3, 2026, former Jagex developer Andrew Lakeman, known to players as Mod Jed and formerly Jed Sanderson, was sentenced to three years in prison, suspended for two years. He must also complete 150 hours of unpaid work and a 25-day rehabilitation activity requirement after pleading guilty. The case followed Jagex’s 2018 dismissal of a team member for gross misuse of moderator privileges and a police investigation that began in 2019.

Lakeman used developer or moderator access, associated tools, and other employees’ credentials to enter high-value player accounts and remove gold and items for black-market sale. Suspicious account-recovery activity first surfaced in May 2018, stopped for several months, then resumed. Investigators tied the access pattern to Lakeman’s devices and home address. Cambridgeshire Police said he banked more than £364,829 in cash from cryptocurrency dealers; accounts of the stolen goods’ value range from more than £300,000 to £543,123. A proceeds-of-crime hearing is scheduled for February 2027.

For any player who suspects a takeover, the immediate priorities are practical: confirm access to the registered email, reset the password if that email remains available, and use Jagex account recovery if it does not. Older accounts created before 2010 may still use the original username rather than an email as their login. Preserve login-change and password-reset emails, authenticator alerts, bank-PIN notices, trade records, screenshots, and timestamps before attempting further changes. Keep multi-factor recovery codes somewhere secure, and submit recovery information from the usual device and location where possible.

The verdict is clear: OSRS wealth is not “just pixels” when it is stolen, and players should treat a compromised account like a real security incident from the first missing item.