A former Old School RuneScape developer has been sentenced for stealing more than $400,000 worth of virtual gold and items from players’ accounts, closing a case that took seven years to reach its conclusion and settled a question British law had never squarely answered: whether in-game currency can be stolen at all.
Andrew Lakeman, 32, previously known as Jed Sanderson and to players as “Mod Jed,” received three years in prison suspended for two years at Cambridge Crown Court on September 3, along with 150 hours of unpaid work and a 25-day rehabilitation activity requirement, Dexerto reported.
Inside access, sold on the black market
Lakeman joined developer Jagex in 2015 as a content developer, a role that came with administrative access to the systems behind one of the longest-running online games in the world. Old School RuneScape’s economy is real in every sense that matters to its players: rare items accumulate value over years, and gold trades for cash on grey markets regardless of the developer’s rules against it.
According to the case, Lakeman used that access to take gold and items from player accounts and sell them. Investigators put the proceeds at more than $400,000. They also identified an additional $493,000 in cash obtained from cryptocurrency dealers, though the source of all the funds was not specified in the case.
The trap
Jagex noticed the pattern in 2018 – accounts losing valuables without the usual signatures of phishing or credential stuffing. The company’s response is the part of the story that will interest anyone who has run an insider-threat investigation.
Rather than announcing a security review, Jagex quietly restricted account recovery options and modified its firewalls without telling employees. The changes narrowed the paths through which the thefts could be carried out and, when the activity continued, produced a trail that led to specific devices and eventually to Lakeman’s home address. He was arrested in July 2019.
The approach worked because insiders adjust their behavior to whatever a company announces. A silent change to the environment, made without notice to staff, is the difference between watching a suspect and warning one.
Virtual gold as property
The legal significance outlasts the sentence. During the proceedings, the Court of Appeal held that Old School RuneScape gold qualifies as “property” under the Theft Act and is therefore capable of being stolen.
That resolves an ambiguity that has protected this category of offender for years. Prosecutors faced with virtual-asset theft have generally had to route around the theft statutes and charge computer misuse offences instead – a fit that ignores the actual loss. Treating in-game currency as property means the charge matches what happened: someone took a thing of value that belonged to someone else.
Detective Constable Andrew McKeane put the principle plainly: “Just because it’s virtual, doesn’t mean he shouldn’t face the full force of the law.”
Why the sentence was suspended
A suspended sentence for a six-figure theft will strike many players as light, and the reaction across the RuneScape community has been predictably unhappy. Several factors typically weigh toward suspension under English sentencing guidelines: the offence dates from 2018, the case took seven years to conclude through no fault attributable solely to the defendant, and a first-time offender convicted of a non-violent property offence falls within the range where a custodial term can be suspended.
The practical consequences are still substantial. A suspended sentence is activated by any further offending during the operational period, and a conviction of this kind ends a career in software development at any employer that runs background checks.
What it means for game studios
The case is a reminder that the most valuable asset a live-service studio holds is not its code but its economy, and that the people with the deepest access to it are employees. Practical controls that follow from this case are unglamorous and effective: separating administrative privileges from development roles, logging and independently reviewing every administrative action against player accounts, and requiring two people to authorize changes that touch balances or item ownership.
Jagex caught this one, seven years ago, by changing the environment rather than the announcements. The court has now confirmed that what was taken was, legally, property – which means the next studio in this position has a clearer route to prosecution than Jagex did.
