Well if any of you use a Blizzard Authenticator for your account safety, well it can also be used to scam. How? Well once you get a hold of an account if you put your authenticator on it then the account is pretty much yours. With the authenticator everything you do on the WoW main page requires it once it is on the account. Even recovering the account. If the victim calls Blizzard they send them an email to get the authenticator off which requires A LOT of personal info including an ID. So if the victim is not the OO of the account there is no possible way they can recall the account.