RuneScape developer sentenced over $400,000 theft from player accounts

A former Old School RuneScape developer has been sentenced after using his access at Jagex to steal gold and valuable items from player accounts, before selling the loot for real money. Andrew Lakeman, 32, formerly named Jed Sanderson and better known to RuneScape players as Mod Jed, received a three-year prison sentence suspended for two years at Cambridge Crown Court. He must complete 150 hours of unpaid work and a 25-day rehabilitation activity requirement. Police traced more than $400,000 in proceeds linked to stolen in-game assets.

It started with strange account recoveries

The case began inside Jagex in 2018. Staff working on player support noticed suspicious account recovery requests involving accounts packed with valuable items and large amounts of RuneScape gold. The activity stopped for a period, which made a technical fault seem possible. Later, the same pattern appeared again. Something wasn’t right.

Jagex began an internal investigation and tightened access around its account recovery systems. Firewall settings changed, recovery procedures became more restricted, and the company kept the operation quiet inside the studio.

The new controls produced a trail. Jagex’s IT staff connected the suspicious access to devices and a home address associated with Lakeman. He denied responsibility when confronted and suggested someone had compromised his own account. Jagex dismissed him and passed the case to police.

A game economy turned into a criminal investigation

Cambridgeshire Police took over the investigation in 2019. Investigators examined devices, online accounts and financial records. Their work linked stolen RuneScape gold and rare items to sales outside the game, where virtual currency can carry a sizeable cash value. The money trail mattered.

Police found more than $400,000 had moved through Lakeman’s bank accounts, with payments linked to cryptocurrency dealers buying the stolen assets. Investigators recovered messages discussing plans to make large sums before leaving Jagex, alongside references to valuable RuneScape accounts. Lakeman was arrested in July 2019.

Charges followed for unauthorised computer access with intent to commit further offences, theft by an employee and offences involving criminal property. He later pleaded guilty. The case had moved far beyond a few missing items from an MMO. Internal account tools had become part of a scheme for taking digital goods, selling them outside the game and moving the proceeds through real financial accounts.

The sentence arrives eight years later

Cambridge Crown Court sentenced Lakeman on 3 September 2026. His three-year prison term was suspended for two years, so he won’t serve the sentence in prison provided he complies with the conditions imposed by the court during the suspension period. He must complete 150 hours of unpaid work and take part in 25 days of rehabilitation activity. The financial side isn’t finished.

Proceedings under the Proceeds of Crime Act are set to continue in February 2027. Those proceedings will deal with recovery of money connected to the offences. For Jagex, the original warning sign wasn’t a dramatic breach or a broken server. It was a pattern in account recovery requests.

This detail gives the case much of its significance. Online games can hold digital items with real cash value, and employees with privileged account access can reach systems ordinary players can’t. Once stolen goods leave the game through unofficial markets, a security incident can become a financial crime case very quickly.

RuneScape’s virtual wealth had real-world value

Old School RuneScape has an economy built around gold, equipment and rare items. Inside the game, those assets exist as data. Outside it, unofficial trading markets can attach real prices to them. For criminals, this creates an obvious route from account access to cash.

The Lakeman investigation shows how a developer’s internal permissions can become part of the security picture. Password theft and phishing remain familiar threats for players, but this case came from inside the company.

It shows how investigators can follow digital theft into ordinary financial records. Account logs pointed to suspicious access. Devices and network information narrowed the search. Bank records and cryptocurrency-linked payments helped establish where the money went. What began as odd RuneScape account recoveries ended with a dismissal, a police investigation, guilty pleas and a Crown Court sentence.

Eight years passed between the first suspicious activity and sentencing. The basic story stayed simple: player accounts held valuable digital goods, someone with internal access took them, and those goods were sold for more than $400,000.

Spread the love