If a member is hacked...

Sorry if this isn't the right section, wasn't really sure where to ask this.

If a trusted member is hacked, and he says to talk with his different msn, other than the one he has in his sig (which doesn't say anything like 'My ONLY Msn: xxx', it just says 'Email: xxx') and then proceeds to scam the buyer/seller, is that the owner of the Sythe account's fault that he didn't secure his account well enough? And would he have to pay the victim back? I'm asking because imaskiller9999 (who has a TON of vouches, seem legit too), or the person who hacked him, did that. I didn't report yet on the off chance that when he said 'I'll go buy some valid pins, brb' and hasn't come back in hours that he really went to get some pins. But, theoretically, would the actual owner have to repay the victim or if he doesn't, receive the punishment as if he was the scammer?