I don't think he can sign a message, as I suspect he is personally selling an hacked account and the new buyer hacked it again! 
Multiple hack, I understood what you meant.There is no one check carefully, so far. In fact, both password and email changed recently. Maybe the statistics on BPIP site has not updated data with short time-gap.
