what about email changes? How someone supposed to identify and report things like that?
I'm looking into one of those pages where accounts sold - there is 307 accounts on sale from EuroAion, some of it of really high level gear (+5 acc).
Other suggestion I would have - by default open everyone's details. That actually would be good proof against some gearless hackers doing weird things.