[resolved]

I'm writing this on behalf of @Inferno Btw with his permission.

Scammer's Profile Link: Online

How they scammed:
- Firstly, @Inferno Btw purchased 100 07 lvl 3 username logins from @Online
Thread: Username Logins ♮ $403+ Donar ♮ 260+ Vouches ♮

Today conveniently, out of the 100 accounts @Inferno Btw purchased, the 3 with rare RSN's on them were hacked.
The RSN's were moved off, and then just a little bit later a user on discord was trying to sell his names.

After talking with people close to this "username login" business @Online is in, these are stolen/cracked accounts. These specific accounts are in databases.
One of the accounts @Online sold was "Stier Norbi" and boom its found in a "db/combolist". Account checkers run programs to find these cracked/stolen accounts.
https://i.imgur.com/M3aZ7Za.png (Someone who used to do this sort of thing confirmed these are cracked/stolen accounts. @Inferno Btw gave him the account "Stier Norbi" and he instantly knew the password.

At first inferno thought Online recovered, but it seems he sold cracked/stolen accounts to @Inferno Btw and this will be proven in this report.

Screenshots of "sale" of stolen names:
https://i.imgur.com/KuXrKLi.png
https://cdn.discordapp.com/attachments/490234398218780683/493212458912317446/unknown.png
https://i.imgur.com/y3XxL32.png


Fortunately, we were able to anti-scam 2 of the names back from him with @Charlotte's permission, helped by @Weekday who transferred the names off the account and back into @Inferno Btw's possession.

Other Relevant Screenshots:
https://i.gyazo.com/thumb/1200/1f530c4f534aabbe9879927728bddac3-png.jpg
Screenshot - 15af5aff0dd87ae7058ced199b551226 - Gyazo
https://i.gyazo.com/thumb/1200/f11db512b2f3b5a9ff9cc82103e67ca0-png.jpg
https://i.gyazo.com/thumb/1200/ad3e0bcba29f2736758217a3f8423f0e-png.jpg
https://i.gyazo.com/thumb/1200/4c02efd434b1a6160da314267f2f3dc7-png.jpg
https://i.gyazo.com/thumb/1200/ed57faa27e27754a90b201ff79424481-png.jpg
https://i.gyazo.com/thumb/1200/030881852f84e4ce20936ddfd1dc88b6-png.jpg
Screenshot - b8ab9a04052ad78854154ce88cf8499a - Gyazo


The questions I have for @Online and would like a mod to ask him are as follows:

1.) If you weren't the OO, who was.
- He told @Inferno Btw in pm's he doesn't remember but that's not good enough when you're selling accounts to anyone and everyone in bulk on Sythe, where in an instant they can be hacked like his were today. So to those who have purchased these "Username Logins" from @Online, I'd be careful what you store on them. Because the exact ones with value could be hacked anytime because they are cracked/stolen accounts.
2.) Can @Online provide proof of purchasing these accounts legitimately ?

More proof that these are cracked/stolen accounts will be in a deleted post below for the privacy of the person we were talking with who wants to remain anonymous.

Accounts bought from @Online
https://gyazo.com/3349af15bf7a9667be652388fa61eddf?token=bcc57b2cac44c35aef09573e1fc4475e

Proof they are cracked/stolen below

 

They were not hacked as you claim? He never changed the password which the seller to me would still have access to them / I wouldn't be surprised if he's sold the accounts multiple times which I don't consider them a risk to recovery as per their origins why would an advertiser have the recovery details for junk accounts. When you buy an account you are expected to secure it by putting your email on it and password to be changed. Once that is done no one but you have access to it.

I do admit and I told Verzik today that the accounts supplied to him were known to be compromised for unknown reasons but were being used by someone unknown and I did not mean to sell those, I thought I had gotten rid of that whole list as the seller or whoever else had the accounts was using/checking them yet.. still would have been safe if you secured the account. That was piss poor of me, evidently, the way I store them does make it difficult on myself in these scenarios with a scam source when I have multiple sources put together / disperse as I put accounts with different sales points together.

"cracked/stolen" is total speculation and I think otherwise as follows;
My latest lot which is my only stock now as long as the above is cleaned up were sold to me as old accounts which were used for advertising which seemed legitimate to me due to the large number with mutes and their location in-game on Runescape 3 being locations you would find spammers it was something like east varrock, draynor and al-kaharid bank, burth lodestone I think it is if they were an area that has been graphically updated etc. this is for the 9HP lot which I personally checked, I didn't bother / can't reasonably check the large list of user logs which are mainly sold to botters.

As for the seller of these accounts to me, it is a long while since the purchase of them, it was over discord which he went first to me so I didn't get his Sythe or whatever. Don't think I will have the transaction / chat logs with the seller and not sure how that would help?

You found a username in a database
I am very vague on how accounts are cracked, not much I can say about it as I don't search wherever you have found them. Is it fair to expect me to be able to search the accounts I purchase up against these databases you are referring to? Obtaining such things sounds illegal to me but then again I have no idea.

If you can explain to me how they are cracked / how I can check then more than willing to stop selling if they are truly fucked. From my naivety from what I saw from my purchase, they seemed like legitimate accounts. I just don't know 100% the origins of accounts, nor can it be proven I thought but you may have something there with the databases. The same situation with the mains I buy but on a singular basis, I do my best and if I can improve feel free to show me how.

 

This isn't my report, I just wrote it.

But it irks me the fact you conveniently wait until his accounts were stolen to tell him "they were known to be compromised for "unkown" reasons, but were being used by someone unknown and i did not mean to sell those" is suspect. This "unkown" figure you mention a couple times says to me he isn't unknown at all. Just someone you want to keep unknown because he's probably your supplier for these cracked/stolen accounts that you "did not mean to sell". You speak of this unknown seller like you know exactly what his intentions were with these accounts because again, "you did not mean to sell these".

That say's you are knowingly buying stolen/hacked/cracked accounts but it slipped your mind to tell @Inferno Btw they were "known to be compromised" until his accounts were compromised. Who's to say it won't happen again or hasn't in the past "slipped" your mind to tell the buyer your accounts were "known to be compromised." The fact @Inferno Btw didn't change the password's ironically turned out to be a positive thing because it proves that these login details w/ passwords are cracked accounts that the wrong person can steal at any moment. Every single one we checked off the list below was found to be a cracked/stolen account.

My last post on this report.

Thank you to whoever reads & handles this for @Inferno Btw. Goodnight.

 

The fact my email was attached is how I knew it was the old bad stock which should not be there, so I let him know I am at fault as well but he didn't discuss at all how he would like it rectified, I left that open on the table.
Compromised is that someone is messing with the accounts for whatever reason so I needed to stop selling them which I did but like I explained, I fucked up and had some still in there, that should not have happened. I literally just explained all that and confess my mistakes.

 

Discussed with other staff, @Online will be required to refund @Inferno Btw for the accounts he purchased. As for the names / wealth on the account, there is not enough evidence and he will not be held liable.

@Online has also been given a TWC for poor trading practices and will be able to apply for its removal in 1 month.

 

Thanks pendy

Just wondering how come hes getting off with a TWC. Is this not the same as 'Chicks' buying and selling hacked gold ? Don;t see how its different buying and selling cracked/stolen accounts.

 

@Inferno Btw
@Pendulum
Made a full refund for all accounts he's purchased from me which I think is due as he shouldn't be using them.
Can you tell me exactly the reason for the poor trading practices? As it isn't what I expect

 

I can confirm I have been refunded fully, thanks for the cooperation

 

as far as anyone knows they aren't? It's purely speculation from what I know

 

The deleted post wasn't speculation.

 

You would have to prove he knowingly purchased hacked accounts. Which you haven't.

You are given a TWC for poor trading practices by your own words "I do admit and I told Verzik today that the accounts supplied to him were known to be compromised for unknown reasons but were being used by someone unknown and I did not mean to sell those, I thought I had gotten rid of that whole list as the seller or whoever else had the accounts was using/checking them yet.. " This is not how you should be treating your customers and you should put more effort when checking your accounts.

Glad you two were able to resolve this.