🚨 WARNING: Fake RSPS at ikovrsps.org Steals OSRS Logins, 2FA Codes, Saved Passwords & Crypto Wallets

A malicious fake RSPS is currently being advertised through in-game DMs at the OSRS Grand Exchange, leading unsuspecting players to the domain ikovrsps.org. This is a phishing site designed to steal your sensitive data.

⚠️ This is NOT the real Ikov or Elkoy.

The official, legitimate RSPS is located at:
🔒 https://elkoy.io

🧨 What ikovrsps.org Is Doing

Once you download their fake RSPS client, it quietly installs malware on your computer. Here’s what it tries to steal:

• 🎯 Your Old School RuneScape login credentials

• 🔐 Your 2FA codes (from Google Authenticator)

• 🧠 Your saved browser passwords

• 💰 Crypto wallet files and clipboard data (MetaMask, Trust Wallet, Ledger, etc.)

This kind of malware is typically disguised as an RSPS launcher, but it's really a full-on information stealer.

🚨 How It Spreads

Players are reporting that bots are spamming messages at the Grand Exchange, claiming to be staff from “Ikov RSPS” and promoting the domain ikovrsps.org.

These messages often offer fake incentives like:

• “Staff spots available!”

• “Join for 100M free starter cash!”

• “High rates + active PvP!”

This is social engineering designed to trick you into visiting and downloading malware.

✅ What You Should Do

1. Do NOT download anything from ikovrsps.org

If you already did, immediately:

• Disconnect from the internet

• Run a deep antivirus/malware scan (e.g. Malwarebytes, Windows Defender, Kaspersky)

• Remove the client and check your startup programs for suspicious activity

2. Report the Site to Google Safe Browsing

Help others avoid the trap by reporting the site:

🔗 Report Link:
https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

Fill it out with:

• Phishing URL: https://ikovrsps.org

• Description:

  This site impersonates a known RSPS brand (Ikov) and is spreading malware that steals OSRS accounts, 2FA codes, browser passwords, and crypto wallet data. It's promoted through in-game messages in Old School RuneScape.

3. Reset Your Credentials Immediately

If you downloaded anything from the site:

• 🔄 Change your OSRS, email, and Discord passwords

• 📲 Reset your 2FA/Authenticator codes

• 🚫 Remove saved credentials from your browser

• 🧹 Scan for spyware/malware tools running in the background

🛡️ Be Smart. Be Safe.

• ✅ The real RSPS is at elkoy.io

• ❌ The fake/malicious site is ikovrsps.org

Never trust links sent through OSRS chat, Discord DMs, or sketchy YouTube comments. Always use verified RSPS toplists like rspstoplist.com to find safe, active servers.

🎯 Stay alert and share this post to protect the RSPS community.

—
rspstoplist.com | Protecting players, exposing scams.