Im not really sure, but it is smart to change the email on it unless you know 100 percent there not on or do the transfer fast. They can just do password retrival and you'd have to recall it, then they'd probably recall it and get it locked. Im pretty sure the new account only has to have the same last name as the one you scammed.