4. The real owner sends me $25 (

), I change the email and password, and wait 2 weeks so it can't be locked.
You don't need to wait 2 weeks. When you change the email you do this...
- Use a useless email address (like yopmail and let no one know about it). The confirmation email goes to the original account holder's email who has the current account.
- Now change the email again with your desire email address. The confirmation email goes to the useless email address which you only know.
This way the original account holder lose the activation/confirmation code
