Friend of mine is just about to buy an account I think. the account has a verified e-mail but no recoveries... does this basically mean a scam? i don't know how this works.
dosen't basically mean it a scam. But the person that owns the account have a higher chance of recovering the account if he is intending to scam.
The owner of the register email got a high chance of being able to recover a account if the register email have been registered to the account for a long period of time.