Stealth Stealing -- Taking the account without them knowing it

[Gyrocopter]

This is a follow up to any scam where you get a bunch of account info. A lot of it seems common sense, but I think stuff like this should be posted just so everyone can work their way up. I'm also sorry if this is a bit sloppy or if there is anything I should change, please tell me about it so I can fix it.

In theory, this should work. I've scammed two people in the past few days -- a guy with a 70 rogue and a 70 hunter, and another guy with a 70 hunter, a 70 druid, and a 70 paladin. All I did was use the email scam to get this info, and the scam works very well for being so old.

This scam relies on the chance that your victim was stupid enough to use the same password for his World of Warcraft account and his email address.

----------------

If you don't have the email address changed (skip if you already have the email + pass changed to yours):

Case study: John Doe (our example victim)

* First and Surname: John Doe
* Address: 1234 Oakly Park
* Zip code: 12345
* Phone number Daytime: 555-555-1234
* Country: United States
* Account e-mail: [email protected]
* CD-key: abcdef-1234-abcdef-1234-abcdef
* Account name: johndoe1234
* Account password: password12345
* Secret Question and Answer: High school? Ridgemont High

Most people stupid enough to send you their account information and stupid enough to use the same password for everything. This is because people are like creatures of habit -- we'd rather memorize one or two passwords than 5 or 6. This part only works if your victim is one of these people.
(PSA: If you're one of those lazy people, go get a unique password for everything and delete the record emails for your own safety. After you get used to typing it a lot, it'll be much easier.)

The only parts we need to pay attention to are in bold-- his name, his email, his account username, and his account password.
As you can see, his email is [email protected]. So we're going to go to gmail.com, enter the username john.doe, and the password password1234.

Didn't work? Try his password without the numbers (in our case, it would be "password"). World of Warcraft accounts require numbers in the password for added security, I'm guilty myself of tacking on generic numbers just for that in the past. If that doesn't work, I'm not sure where to go with that, sorry.

It worked? Excellent!
Now look at his emails -- but don't open them. Note in your mind what's open and what's new. Now and go look through stuff -- see if characters have been previously transferred off and if he's contacted Blizzard before about account trouble. I once found out a target had been scammed by another user on this forum. If you're beaten to the punch, you can try and log on his account and see if there's anything left, otherwise move on to a different account.

It's important that you mark anything new that you read as unread after you finish reading it. This whole part is about not letting him figure out you were in here.

Go to the Settings tab in Gmail, or the equivalent in any other mail service. Go find out if he's forwarding incoming mail to any other accounts, or if he has a backup account listed. Go remove that, we don't want him having any evidence of what we did. Go change his email's password so he can't log in on us and change his secret question/answer to the account too.

Now this is the fun part. In a new window/tab, open up http://www.worldofwarcraft.com/account/index.html. Click the "I forgot my username/password link". On the next page, click "I forgot my username". Now put in the email. Reasoning behind this: Why score only one 70 when you can score two?
Go back to the email address. Does he have more than one account?
Go back to http://www.worldofwarcraft.com/account/index.html and log into the first account he gave you. Change the email and password, now go verify it and delete those two emails. Do this for every WoW account the poor kid has.
Delete all the emails sent from Blizzard just now. Now go into his Trash Bin on the email site and delete the emails there, and only those emails. Double check this part, we don't want him catching on.

Change his password back.

If you pretended to be Blizzard to get his account and he asks why he can't get on the accounts, tell him all his accounts were frozen because he was trading them or they were insecure -- whatever you feel like.

On to the next part -- making them yours.

----------------

When you have the account's email and password changed to yours:

You now have the accounts under your possession -- the emails are changed to yours and the passwords are changed.
The great thing about this is that all his accounts are under the same last name.
This part requires money for an account transfer for each character and a new WoW account.
Create a new WoW account using the same last name as your victim's account. The first name can be different and every other detail should be different.
Go onto the characters you scammed. Loot all the undesirable characters -- sell their gear, and send anything valuable that's BoE and all their money to the characters you're going to transfer. If you try anything funny like robbing their guild banks or scamming people in game, don't unless you're an expert at not getting banned while doing stuff like that.
Delete the undesirable characters. Recreate them now -- if you deleted a male Human mage, create a new male Human mage with the same name.

Now on your new account that you made, go make a character named the same as the characters you're transferring.
Supposing he has a level 70 undead rogue named Skippy, go create any character named Skippy on the realm you're going to transfer him to.
Go and transfer the characters from his account to your account. Fork over the money for the transfers, and choose to transfer the character to a new realm at the same time for extra security. Because the name is taken, when you try to log in as the 70 rogue after he's done transferring, it'll ask you to rename him. Delete the level 1 Skippy AFTER you rename the 70 rogue. Repeat this for every character the guy has that you want.

Jump on the old accounts and get them banned -- run Cheat Engine or something while on them. Apparently this bans the character permanently and Blizzard won't even glance at these characters again. Secretguy warns you a few posts below -- make sure none of the payment info on any of your accounts match, otherwise they'll ban all accounts under the same name.

Tada! The characters are all yours.

[Lyricalwarfare]

It's a repost but I like that you go deeper into it, so +Rep 4 U

[Gyrocopter]

It's a repost but I like that you go deeper into it, so +Rep 4 U

Thanks.
That's what I was aiming for, except for the repost part of course.

[swankboss]

Hmm.. I have this persons

email (access to it)
account name
and first and last name
day time phone

but... no password

is there anyway I can get the account?

[joachim12]

You can of course try the same password that he used for his email, if it isn't correct try to swap some numbers/words to create different combinations (most of the time people use always the same word in their password). But in order to take full control of the account you defenitely need the secret question answer.

[secretguy]

When Blizzard bans for using 3rd party software, they sometimes ban all accounts related to payment info, just a tip for anyone considering this. Otherwise nice guide.

[Gyrocopter]

Hmm.. I have this persons

email (access to it)
account name
and first and last name
day time phone

but... no password

is there anyway I can get the account?

Change his email's password, send Blizzard an email asking for a password reset to the account, change the account password, change the account email, delete the emails, empty the email's trash, double check if you left anything, change the password back.

When Blizzard bans for using 3rd party software, they sometimes ban all accounts related to payment info, just a tip for anyone considering this. Otherwise nice guide.

Good tip. I put this up in the first post just in case it would apply to anyone, and it's something everyone should know in case one account gets banned for botting or something.

[dabang]

again... i could see some one taking you to court for this it looks illeagle o.O

[',-Jurkey-,']

When a guy try change email you send the real owner of the account a email about he want's to change his email.
If he doe'snt answer that it not being changed and then he can just change the password!

I tried a "How to be GM on real servers" thing on youtube, i actually knew it not would work but i tried make a guy think he was scamming me xD. Then i just changed my password, Wollah! He could not access my account. But +rep anyway.

[Gyrocopter]

When a guy try change email you send the real owner of the account a email about he want's to change his email.
If he doe'snt answer that it not being changed and then he can just change the password!

I tried a "How to be GM on real servers" thing on youtube, i actually knew it not would work but i tried make a guy think he was scamming me xD. Then i just changed my password, Wollah! He could not access my account. But +rep anyway.

Not sure if you understand what I said I'm doing here.
I lock the owner of the email address out of his email while I change the email and password on his WoW account, then I make it look like nothing happened and give him my account.

When that one guy you're talking about was trying to take your account, he
did a sloppy job -- you saw the email, you knew someone was trying to take your account, you did the smart thing.