Scammers like to get the account they've scammed/stolen from permabanned when they're done, to reduce the chance of Blizzard actually listening to the account owner's complaints.
The best/funniest idea I've heard is still:
Open a ticket with a GM about something trivial. Have a macro ready that says:
/r Greetings player this is Game Master <Your Name>. Blizzard has identified that your account may be compromised and we would like to verify ownership of the account. Could you please provide us with your account name, your secret question and answer, and your surname. Remember, a Blizzard employee will never ask for your password!
Now, as soon as the GM whispers you about the ticket, hit the macro so it sends the whisper to him. Try to do it as quickly as possible.
Then wait a couple of seconds, and say:
/r Oh shit.
/r Um that was just my auto whisper bot. Sorry.
