I doubt it will be the actual "hacker" you are dealing with. I think the hacker probably just sells them and then whoever actually bought the account is also screwed when it is outed.
If negative tag before selling the account then anyone will not buy the account. And if anyone buy account then the pharmacist will tag him/her. So, his/her account will not have any value. And in this case 25$ will be considered as something is better than nothing.
This will most definitely lead to more account hacks and even though you mentioned you would keep it a fixed fee
I don't think so. I think hacker do not hack account for such a small amount. Hacker usually hack account to sell or to scam a large amount. Eg: make reversible transaction, take loan and default, take payment first and never complete the deal and something like this.
You don't need to wait 2 weeks. When you change the email you do this...
- Use a useless email address (like yopmail and let no one know about it). The confirmation email goes to the original account holder's email who has the current account.
- Now change the email again with your desire email address. The confirmation email goes to the useless email address which you only know.
I think still hacker can lock the account as s/he has received email but Not sure.