Fake OSRS sites and AI clones: how to spot them in 2026
In September 2026, Eurogamer reported RuneScape players revolting over a gen-AI copycat game that appeared and eventually attracted Jagex's attention — a reminder that fake OSRS content is no longer just amateur phishing. The official OSRS channels are: the website at runescape.com (with osrs portal at oldschool.runescape.com), the Jagex Launcher for desktop, the official Steam page, and the official apps on iOS/Android published by Jagex. Red flags for fakes: lookalike domains (rune-scape, runescape-live, or typos like runescapee), login pages that ask for your password outside the official launcher/website, 'free gold' or 'double XP' offers, apps on third-party stores with misspelled names or AI-looking art, and any site claiming to be a 'private server' that keeps your data. Third-party tools like our osrsdpscalc.com are legitimate calculators, but you should always verify a site's domain and HTTPS before entering anything account-related. If you think you visited a phishing page, change your password immediately, check your linked email, enable or recheck 2FA, and contact Jagex support via the official channels — never through the phishing page's own 'support'. Our account security guide covers the full 2026 security stack (Jagex Account, 2FA, bank PIN, recovery), and our RWT guide explains why 'buy gold' sites are both a ban risk and often phishing too.
Key takeaways
- September 2026: players revolted over an AI-generated RuneScape clone that drew Jagex's attention — fakes are more sophisticated now.
- Official channels: runescape.com / oldschool.runescape.com, the Jagex Launcher, the official Steam page, and Jagex's own apps.
- Red flags: lookalike domains, login pages outside the launcher, 'free gold'/'double XP' offers, and third-party store apps with AI-looking art.
- Always check the domain and HTTPS before entering anything account-related — even on tools that look professional.
- If phished: change password, recheck linked email and 2FA, and contact Jagex support via official channels only.
- Third-party 'buy gold' sites are both a ban risk and frequently phishing — the RWT guide covers why.
The 2026 AI clone controversy
In September 2026, Eurogamer reported RuneScape players revolting over a gen-AI copycat game that appeared online and eventually attracted the eye of Jagex. The article's headline — 'What in the vibe-coded s*** is this' — captured the community's reaction to a game that looked RuneScape-like but was clearly AI-generated.
The incident matters beyond the drama: it is the first mainstream example of AI-generated RuneScape imitations, and it shows that fake OSRS content is no longer limited to shoddy phishing pages. Imitations can now look plausible at a glance, which makes verification skills more important than ever.
Jagex's attention means the copycat will likely be dealt with, but the lesson for players is permanent: do not assume a game, app or website is official just because it looks like RuneScape.
Know the official channels
The official OSRS presence is small and easy to memorise. The website is runescape.com, with the Old School portal at oldschool.runescape.com and the news/blog section under m=news. The desktop game runs through the Jagex Launcher, and the official Steam page and the iOS/Android apps are all published by Jagex.
Official community spaces are the OSRS Wiki (oldschool.runescape.wiki), the official Discord, Reddit's r/2007scape, and the official social accounts — all linked from the website itself.
Everything account-related happens inside the launcher or the official website. If something asks for your password, authenticator code or bank details anywhere else, it is a scam by definition — official systems never ask for those outside their own flows.
- Website: runescape.com · OSRS portal: oldschool.runescape.com.
- Desktop: Jagex Launcher only.
- Mobile: Jagex's own apps on iOS/Android; official Steam page for Steam.
- Community: OSRS Wiki, official Discord, r/2007scape.
Spotting fake websites and phishing pages
Lookalike domains are the classic tell: rune-scape.com, runescape-live.com, osrs-login.com, or a typo of the real name. Check the address bar carefully — subdomains like runescape.com.evil-site.com are not runescape.com. Phishing pages also pressure you with 'your account will be banned' or 'claim your reward' urgency.
A legitimate third-party tool (like this calculator site) is fine to use for calculators, prices and guides — but it should never ask you to log in or enter your password. If a tool site suddenly asks for credentials, it is compromised or fake; leave and verify via the wiki's external links.
Browser hygiene helps: check for the padlock (HTTPS), and for important sites bookmark the real URL once instead of typing it from memory or clicking ad links.
Fake apps and AI-generated clones
App stores contain fake 'RuneScape' apps that either try to phish logins or push ads. The tell is the publisher: official OSRS apps are published by Jagex. Anything else — regardless of how good the icon or screenshots look — is fake. Check the publisher name, the download count and the review history before installing.
AI-generated clone games are the new frontier: they may reuse RuneScape art, have plausible-sounding names, and even imitate the gameplay loop superficially. Red flags include art that looks generated (smooth but wrong details), text errors in descriptions, and a game that asks you to 'log in with your RuneScape account' — the real game never does that through a third party.
When in doubt, the official answer is one search away: verify on the OSRS website or wiki before downloading anything.
What to do if you think you were scammed
Act fast, in order: change the password on the account you used (and the email linked to it if you re-used a password), then check your linked email for anything unusual, then re-verify your authenticator and bank PIN are still yours. If you lost items or an account, contact Jagex support through the official support centre — never through the phishing site's own 'support' link.
Recovery works when you can prove ownership: the account security guide explains exactly what Jagex needs (registered email, recovery questions, past payment info) and how the Jagex Account system streamlines it.
Finally, do not panic-pay: legitimate support is free and never asks for payment to restore an account. Anyone demanding 'unban fees' or 'verification payments' is a second-layer scammer.
Questions players ask
Is there an AI-generated RuneScape clone game?+
In September 2026 Eurogamer reported a gen-AI copycat game that sparked player backlash and drew Jagex's attention — a sign that RuneScape imitations are getting more sophisticated.
What are the official OSRS channels?+
runescape.com and oldschool.runescape.com, the Jagex Launcher for desktop, the official Steam page, and the iOS/Android apps published by Jagex.
How can I tell if an OSRS site is fake?+
Check the domain carefully (lookalikes and typo domains are the main tell), confirm HTTPS, and remember no legitimate site — official or tool — ever asks for your password.
Are third-party tools like osrsdpscalc.com safe?+
Reputable calculator and guide sites are safe to use and never need your login. Verify the domain and use the wiki's external links if you are unsure.
What should I do if I entered my password on a fake site?+
Change that password and the linked email password immediately, re-verify 2FA and bank PIN, then contact Jagex support via official channels if you lost access.
How do I avoid fake RuneScape apps?+
Only install apps published by Jagex, check the publisher name and review history, and ignore third-party store listings regardless of how convincing they look.
Sources and verification
These references support the game mechanic or live-data boundary described above. Check the current source before a large in-game decision.
Independent fan-made OSRS content. No Jagex affiliation or endorsement.