Doesn't matter if he sold it or not. It was clearly his account, the current user hasn't proven that he acquired it with the consent of its owner, the owner has reported it stolen, and it was used for deceptive marketing by the current user.