oh..... ohhhh thats a scam lol.. heres how it works. you are looking for hot cool sexy account names and all of a sudden you find a really kick ass account name in 2025?? (its usually double registered) so think of it like fishing lines you have any lines out (accounts) and you allow the public to make the account put chars on the account but even if they register the account they dont actually own it because its double registered. all of a sudden the password gets changed, you registered it you changed the password yourself but the account is actually linked via another recovery email. its a known scam to harvest char names and gear. if the password did just randomly get changed thats a sign its double registered. and if you think no one has used that account name before think again.

heres what you should do:

find a kick ass account name, is it double registered? you just dont know so DO NOTHING with it just keep it active for 1-2 years and if nothing changes its likely fine or the owner of the double registered account is playing the long game.

The account had special characters, no email stated in green when entering channel chat. It wasn’t until I requested in support ticket for them to register my email to the account that the password changed. I still receive the account recovery links via email but they’re all broken/time out instantly. The only way to change the password is doing in game and knowing the current tmk. Any other way doesn’t work. All support links from blizzard don't work. Lesson learned for sure.

Its unfortunately working as intended. Blizzard has none existant support nowadays

Its a good thing that blizzard don't fall for this scam anymore. Thats how the theft use to get access to the accounts they wanted to break into and steal everything
So if you don't got access to the e-mail or know your password, sorry for you but thats how it is and its done deal

The factt that they let you change an email without even being 100% sure your the owner is beyond me, i wouldnt allow this if i were a tech support worker. Its really dumb from their sides

They require screen shots of proof of ownership, keys utilized ect. But anything more than the email … outta there.

They have been played, theft were using this method to break into richest players accounts.
Now they don't fell for it anymore, its pretty much your on your own. And its a good thing

You could buy someone account, and what if he recovers it behind your back because he claims hes the cdkey owner ? Would you be happy

If the support links in email worked, I’d be happy.

Its intended to be like that, to protect from theft using that exploit.
Scammers found out unregistered account were safer than e-mail registered ones. And abused this until b.net found out they fell for scams and gave away on a silver platter tons of account

thats not how the scam works.

1. find a high quality account name
2. register it with YOUR email
3. allow the account to expire
4. get a status check on the account - you can use autoit for this to check if the account name is available or in use log result
5. someone grabs the name and uses it for about a year
6. you the real owner resets the password then steal the gear and allow the account to be recovered
7. the account is known to be untrusted and the player who is scammed allows the account to expire
8. the account name is now available and the scam starts again.


so no you dont see an account then force a email change on it then steal the gear you actually have to access it first. blizzard does not just allow the email to be changed you are wrong there. thats why i always tell people if you find a high quality name account hold on to it and put bait items on it and just leave it for about 2 years and see if the account gets accessed. so you never could break into rich accounts that never happened. if accounts that do have high quality items its a side channel attack like getting the player to install malware or key loggers in autoit - very very common.

This post was edited by WiseWolf on Nov 25 2025 01:14pm

No the method you just posted is called double-reg, its been long patched. No longer works (its an old scam)
The e-mail change is another exploit (the most recent) which involved in getting an e-mail change without having access to the account or password, and lost access to the e-mail (its a gimmick) into tricking the tech support to force change the e-mail. and yes they fell for this scam ask around if you don't believe me.