Heya, this is kind of lengthy, but I've been hacking MMO Accounts since UO. So hopefully I can offer some insight. If you are serious, however, about getting your hands on accounts and making the most of it, please do read.
It's always very important to get as much control as you can if you want to keep the account, character, or gold.
Section 1 - If all goes well
1) Log in with the account on the forums. (Logging into a character is the LAST THING I DO!)
2) Make a list of all the 70's.
3) Search their names on Armory.
4) Pick out the most well played ones (usually the best geared )
5) Search for their guild forums online.
6) Find their account name by browsing through - it'll usually be their character name.
7) Try to log into the forums using the WoW account password.
If you're unsuccessful, go to Step 13. If the password from the WoW account WORKS for the forums... Bingo.
Go into their user CP and get their email. If it has the same first letter as the one in the WoW account info, there you go. If not, go down to section 2.
9) Log into their email using - once again - their account password if it's a web based email account. (Most are - gmail, hotmail, yahoo, etc) If it's NOT, research the domain name and find out if they have a web based mail service. Most ISPs do.
10) Poke around inside their email. Search for their full name, search for other accounts. Some keywords I use while searching through somebody's email if it's particularly bloated are "Blizzard", "Account", "Transfer", "Password", and "Login". (I have once found four accounts by reverse hacking in this method, starting ONLY with an account username/password!)
11) Now you've got their full name.
12) Now's the time for one of three scenarios:
A) If it looks like they're NOT the original owner, you can just try to hijack their account. The way I do this is change their account password, change their account email, and ALSO change their email's password. (if it's a free web based one - don't try this with an ISP based mail)
B) If it does look like they're the original owner, you had better hope you have their last name. If you don't, go to Step 13. Cut your losses, you're not keeping this account.
C) If it does look like they're the original owner, AND you have their last name, it's time to shine. Follow this guide: If you're interested in keeping the character(s) on the account(s) for resale, follow this wonderful guide:
http://www.mmowned.com/forums/wow-sc...ing-legit.html (Keeping a Scammed Toon... and making it LEGIT.) And enjoy your fresh new characters. Perfect for resale or just for keeping!
13) Alright, time to log in. Do it on off hours. I usually make an alt first and /who their guild. The fewer people on, the better. Preferably, nobody in your guild should see you log on - because they could potentially be a relative, significant other, or even your target on another account!
What I do when I log in is work my way from the lowest levels up. I check all of their banks, their guild bank access level, and their money. I've found plenty of level 1 alt mules holding thousands of gold either in cash or in assets. DON'T SKIP OUT ON THESE GUYS! Every character that has gold, mail it to the final target. You should know who this is already if you've followed my instructions.
Finally, you reach the big guys. Mmmm, tasty. Now, depending on what you want to do, you'll approach this differently.
A) You're gonna loot the account and launder the money.
- If a guildy is on, and you have balls, ask for a minor loan. I've had situations where I've waited days for an empty guild, and never had a shot. So I had to log on with a few people. I've also made an extra thousand gold or so from 'borrowing'. I do this first if I'm going to so they don't see me completely naked, nor do they see me spamming cheap enchanting materials.
- Check your mail, check the auction house for any sale you have up.
- Check if the character has enchanting first. If so, disenchant *EVERYTHING*. Go check the auction house for mats prices, and then spam in /2 that you're selling those mats at one half to two thirds of the AH price. Vendor EVERYTHING else unless it's valuable and easily sellable to other players. (Don't forget to do this with regular bank items too!)
- Check the guild bank. See what access you have. Withdraw the MAX amount of cash, then empty out everything you can. If you have a limited amount of withdrawals, go for stacks of items, or very valuable items. (I like stack of enchanting materials - easy to sell within minutes, or even seconds, if they're low priced) If you have full access and unlimited withdrawals, this might take a while.
- Launder the money! (Search the forums, there are some good methods.)
- Queue up for WSG/AB/EOTS/AV. Use Cheat Engine (google it) to speedhack and win a fast WSG before you're banned.
- Alternatively, and what I prefer doing (have been doing in WoW for a while) is this post:
http://www.mmowned.com/forums/wow-sc...easy-step.html
B) You've got their name, and you're going to transfer.
- Set up the account FIRST!
- I usually take any 70 that has at least half epics, or has two professions to 375. They sell for the most. So, if you're going to make money selling hacked characters, you've got to spend a little.
- Alright, first, I log onto the lowest level characters. Look for mules. Check your bank. Mail anything valuable to the main. Work your way up, and send EVERYTHING REMOTELY VALUABLE TO THE MAIN CHARACTER(S) YOU PLAN TO TRANSFER!
- Check the guild bank on every character. Take out as much as you can, if it's limited, go for stacks of stuff or very expensive items. (Note: Sometimes I've been able to promote alts up further so they can access more in the bank! Especially useful if one of their characters is an officer without unlimited access.)
- Get on your final target, get the stuff out of the mail, check the auction house and make sure you don't have anything up.
- Log out, and transfer away. Watch their email to intercept any password resets while you're waiting for the transfer to complete, if they gain access to their account fast enough they can cancel the transfer.
Section 2 - If something goes wrong
1) You're here because the email in their forum User CP doesn't start with the same letter as the account email. Alright, time to dip around in the email that IS listed. You might get lucky.
2) Log into their email. Run some searches: "Confirm", "Account", "Registered", "Mail", and "FW". You might get a lot of hits on these. Sift through them and hope you can find his OTHER email. Another thing to search... look up his name in user details on the webmail, and search for his first and/or last name. You might get lucky and find something he's emailed to himself from another account.
3) One of two results...
A) You found another email of his! If it matches the first letter, try to log in, and go to Step 9 in Section 1. If it doesn't, go into that email, and repeat Section 2 from Step 2.
B) You didn't find crap. Alright, it's time to cut your losses. Sell everything, launder it all, and you're done.
Tips:
Once you're done with an account, ALWAYS GET IT BANNED! (This is common advice around here, nothing new.
) I usually just go to a BG and turn on Cheat Engine. Crank up the speedhack. It's fun for a few minutes, and you get wasted. (Make sure you wait until AFTER any character transfers are finished! lol) Or do this for a NEARLY guarenteed permaban: http://www.mmowned.com/forums/wow-sc...easy-step.html and you can skip the next paragraph.
Something kind of tricky I do after I'm done... which might seem a little odd... is I leave their email password unchanged after I ban the account.. Then what you do is monitor that email like a HAWK. (You'd better have some spare time!) If ANYTHING comes in from blizzard, delete that shit - then remember to double delete it from the trash bin. Some email clients let you set a filter that will auto-forward and delete mail from certain recipients. Do this if you can, and check regularly to ensure the filter isn't removed.
If he does a password reset, make sure you're the one to grab that password and chuck the email before he does. This gets risky, but if it works, it pays off.
Why do I do this? Well, the first ban for Cheat Engine I've found is USUALLY a 72 hour suspension. So what we want to do is make sure that we still have access to that account after 72 hours. Why? So we can log on, crank up Cheat Engine again, and finish it off with a Perma-Ban. Then they'll never get back in, and hopefully, they'll never even realize that their characters and/or gold was stolen.