Old School Runescape developer sentenced: Former Old School Runescape Developer Andrew Lakeman Gets Suspended Sentence

Former Old School Runescape Developer Andrew Lakeman Gets Suspended Sentence

Old School Runescape developer Andrew Lakeman received a three-year suspended sentence for stealing in-game items and gold from players.

Lakeman, 32, known as ‘Mod Jed’ within the Runescape community, was sentenced at Cambridge Crown Court on Thursday, September 3, 2026, after pleading guilty to charges including theft by employee and unauthorised computer access. His actions netted him over £364,829, or approximately $490,000, which he funneled through cryptocurrency dealers on the black market.

Old School Runescape developer sentenced for virtual theft

The sentencing marks a significant moment for the gaming industry, highlighting the growing legal challenges posed by virtual economies and in-game assets. Lakeman’s case also set a crucial legal precedent in the UK, as courts wrestled with defining digital items as tangible property subject to criminal law. His conviction underscores the severe consequences for employees who exploit their positions for personal gain.

Lakeman, who joined Jagex in November 2015 at their Cambridge Science Park offices, exploited an insider’s understanding of the game’s systems. He reportedly accessed high-value player accounts by using information that genuine owners would typically not know. This allowed him to strip these accounts of vast quantities of in-game gold and rare items.

Suspicions first emerged in May 2018 when Jagex’s player support team detected unusual account recovery activity. Valuable in-game items and gold were consistently disappearing from various Old School Runescape accounts. After a temporary lull, the suspicious activity resumed later that same year, prompting a deeper internal investigation.

Jagex Investigation Uncovers Insider Threat

The company’s internal inquiry concluded that the perpetrator must have been an employee, given the nature of the account access. Jagex covertly modified its firewall and account recovery protocols, creating a trap to identify the source. This allowed their IT department to trace the illicit activity directly back to Lakeman’s devices and his home address.

Following this internal probe, Jagex publicly announced in September 2018 that an OSRS team member had been dismissed for “gross misuse of moderator privileges.” While they didn’t name Lakeman directly at the time, the company reassured players that no banking or card details had been compromised.

They also committed to returning stolen items and in-game currency to affected players, acknowledging the extreme nature of the incident.

The Scale and Financial Impact of the Crime

The sheer volume of the stolen assets was staggering, underscoring the lucrative nature of real-world trading in virtual goods. Lakeman’s operation involved the systematic theft of property from numerous players over an extended period. The scale of the financial benefit to him was substantial, attracting the attention of law enforcement.

Cambridgeshire Police, who took over the investigation in 2019, determined that Lakeman banked more than £364,829 in cash. This money originated from sales to cryptocurrency dealers on the black market. Jagex, in its own estimates, placed the real-world trading value of the stolen assets even higher, at approximately £543,123, paid out in Bitcoin and cash.

Lakeman’s illicit activities affected 68 player accounts, according to the Crown. He systematically stripped these accounts of roughly 705 billion gold pieces, a quantity almost unfathomable within the game’s economy. Device searches conducted by police uncovered messages to his wife where he expressed intentions to “make a lot of money before leaving Jagex,” specifically mentioning high-value Runescape accounts worth tens of thousands of pounds.

This case serves as a stark reminder of the financial value embedded within virtual economies. It highlights how digital assets can be converted into significant real-world wealth, attracting criminal activity. The conversion of in-game items into hard currency via cryptocurrency channels further complicates the investigative process for law enforcement agencies, requiring new expertise.

Groundbreaking Legal Precedent for Virtual Assets

A pivotal aspect of Lakeman’s case involved a groundbreaking legal battle to define virtual items as property under UK law.

In January 2026, the UK Court of Appeal delivered a landmark ruling in R v Lakeman EWCA Crim 4, establishing that Old School Runescape gold could indeed be legally classified as “property” subject to criminal theft. This decision overturned an earlier ruling that had dismissed gold pieces as non-rivalrous or merely “pure information.”

Lord Justice Popplewell, delivering the Court of Appeal’s judgment, articulated that gold pieces are “assets with an ascertainable money value, traded inside and outside the game, and capable of dishonest dealing that strips the owner of use and value.” This ruling provided a critical legal framework necessary for prosecuting Lakeman effectively.

The Supreme Court subsequently refused Lakeman permission to appeal this ruling in June 2026, solidifying the precedent.

This judicial development is crucial for the evolving legal landscape surrounding virtual economies. It clarifies that digital assets with real-world monetary value are not exempt from traditional theft laws. The ruling provides a template for future prosecutions involving similar crimes, offering greater protection to players and game developers alike.

It reflects a necessary adaptation of the justice system to evolving digital landscapes and virtual property rights.

Sentence and Future Implications for Virtual Crime

At Cambridge Crown Court, Andrew Lakeman pleaded guilty to the offences. He was handed a three-year sentence, suspended for two years, meaning he will avoid immediate imprisonment provided he meets certain conditions. As part of his sentencing, Lakeman must complete 150 hours of unpaid work and undertake a 25-day rehabilitation activity requirement.

A Proceeds of Crime Act timetable is also in place, scheduled to conclude in February 2027, with the aim of recouping the money he amassed from his illicit activities.

Detective Constable Andrew McKeane, one of the investigators on the case, emphasized the severity of the crime despite its virtual nature. “Lakeman was well aware what he was doing was wrong,” McKeane stated, adding, “the hundreds of thousands of pounds he gained from selling the in-game items is no different to any other theft.

Just because it’s virtual, doesn’t mean he shouldn’t face the full force of the law.”

McKeane further highlighted the broader implications, noting, “Given the rapid growth of online and virtual worlds, the justice system is going to have to keep pace and adapt to these new and emerging crimes.” This sentiment resonates across the gaming and legal industries, as digital assets become increasingly integrated into mainstream commerce.

The case sets a clear precedent that virtual crime will be pursued with the same rigor as traditional theft, signaling a new era of accountability for online misconduct.

The long-term impact on player trust in online games, particularly those with vibrant in-game economies, remains a key consideration. Incidents like these can erode confidence, but the decisive legal action taken by Jagex and law enforcement aims to rebuild that trust.

Game developers will likely continue to invest in enhanced security measures and internal oversight to prevent similar breaches in the future. The conviction also serves as a potent deterrent for others considering exploiting their positions within gaming companies.

This case also underlines the importance of robust internal security protocols within gaming companies. Jagex’s swift detection of suspicious activity and subsequent internal investigation were crucial in identifying the perpetrator. While the incident was damaging, the company’s transparent approach to informing players and restoring stolen assets helped mitigate some of the negative impact.

The incident highlights the need for continuous vigilance in securing complex digital ecosystems against insider threats.