Ok ok so I thought about it, they asked him to send it from his registered email because they were replying to an email he sent them, in which case they didn't know the account, it could be that Blizzard has taken account security one step further, because scammers all over could before obtain an account with just a photo ID of the owner/cd-key, which is obtained through scam emails. The 3 highest chars on the acc question could be for extra security, as the full name, adress etc. I think the SQA is a pretty big deal and they don't want to give it away without 100% insurance that you are who you are.