So the title pretty much sums it up. When I first started playing runescape again like 6 months ago I was naïve and clicked a double xp ad. I logged into the phishing site using my osrs info and obviously I didn't get double xp lmao. My question is what do I do now that I know my account info is in the wrong hands? As of now I've invested a lot of time and irl money into this main. Obviously I had the authenticator on but how do I maximize the security of my account now that its exposed? Nothing has happened yet but im just waiting for the day.