He bought the account KNOWING there was no recovery email, he said so himself.
This is not debatable. You sold the account / you are responsible for what happens with it when you sell it. Regardless, you should not be selling an account your friend can recover at any time he feels like it.
You are responsible, please post here when this is resolved.
@paveelyon If you would like a full refund rather than the account, please let us know.




