Basically, during the Valentine celebration in WoW (or any other time you can get candy that doesn't have a description of stat bonuses), buy a bunch of "non-beneficial" candy, you know...candy that doesn't boost stats or health (I'm thinking those little "I love you" heart candies they gave away on Valentine's Day).
Take this candy and advertise over LFG Channel or Trade Channel "Selling SPECIAL candy, whisper me if you're interested." Anything of that sort. When you get whispers from 40s-50s asking why it's so great, say that it boosts stats permanently, or even levels you up once (this will be a very good idea when BC comes out; explain that Blizz implemented a few means to level players up faster to experience 60-70 gameplay that BC offers). I used the "boosts intellect permanently by 5" junk, and got quick responses "how much?" I sold mine for 5g a pop, which isn't bad since I sold 10-12 just experimenting.
It works pretty well, I do think this is a scam for the idiots of the server, but the ones that whisper you asking about the candy usually are the target idiots, so go for them. Be sure to do this on a deletable character in case of being reported, though I doubt Blizz would take action. It's also pretty funny to give them a heart candy saying "I love you" then watch them get pissed off when it doesn't work.
P.S. This was last Valentine's Day for me, I'm gonna look for Christmas goodies and try it out that way too.