So you mean i could be the hacker that ask to recover a password to eventually scam people ? If yes, you dont believe i would myself changed the password through the email adress recovering ? Anyway, i understand that lot of people abused before so people like me dont get the help needed thank you. Could be nice to put a PIN code or 2fa for password/email changing.