Okay this is the most common ways that people scam or steal accounts and is one of the easiest.

Here is the real Runescape Website Login URL with Jagex's mark for authenticity.
[ Register or Signin to view external links. ]
[ Register or Signin to view external links. ]

If you ever get a link from a third party or basically someone who isn't affiliated with Jagex then don't use it to log in to Runescape.

Well I am not really big into bots any more but if they are anything like the bots I used where you would copy the source code of the script you can search the script for various things.

In example
pass
@gmail @hotmail @aol and so on

You can also look at other replies on the forums for the script and see if there are any negative feedback like people losing items or losing there accounts.

I would only trust people who have the source code posted in there forum post about there script.

I have noticed these becoming more frequent recently, basically it is a javascript that infects your java and can act as a keylogger. It is one that is the least heard of which makes it the most effective for the stealing of accounts.

What I have seen this in
Live streams
Web Clients for Private Servers
Downloaded Private Servers
Various websites that act like a high ranked Runescape Private Server

To avoid these, you just have to be smart. There are usually people at a dungeoneering world auto typing "Go check out this live stream for Dungeoneering glitch 1M tokens/hour" Which I have went to five of those links with my iPad and they were all Java drive bys. Thank you iPads not supporting Java. <3

These are probably the most stupid ones. People will email you with an email like JagexMod @ hotmail.com which is obviously fake since Jagex will only attempt to contact you through the Runescape website messaging system.

Most of them will say email us your username and password for moderator, administrator, 999M gold, rare items, and so on.

People are able to get information off you with Skype, like your IP address. Which I am pretty sure people can easily DDoS you and other stuff if they have your IP address. So be wary of random people wanting to Skype with you if it retains to Runescape.