Like I said, there's pretty much no reason to log into someone else's account to spend your own money -- if the original person gets their account back, the scammer's out the dough AND the games he bought with it. So, he's using someone else's account and spending an entirely different person's money in that account on stuff he'll then turn around and sell or trade to some other poor schmuck.

In short, we seem to be in agreement. ; ]

I would assume that the games were bought as gifts, and that said scammer already got the gift codes and put them up for sale on G2A or similar, the account is of no more use to them except as a way for getting more games (but they likely have access to several other accounts). Still though, the OP should change the password to both their GOG account and their e-mail account, if they haven't already.

And assuming he didn't go through with his original intention of deleting his GOG account. ; )

Seeing how the posts still have the name attached to them, the account is still there. Unless GOG has changed how account removals are handled, account info for removed accounts is displayed different from active accounts (similar to how GOG employees don't have a displayed rep and how anonymous posts - which is no longer possible - obviously don't have any info).

Wouldn't it be better to reset your password thereby removing access???

Good point.

Regarding the no-longer-supported "guest" posting: do you know how long it's been since they removed that option? Because I noticed eons ago that the Forums and feedback section of GOG's official FAQ still contained outdated mentions of posting as an anonymous user...and surprise, surprise, those references are still there. (This is me looking surprised: : | )

Sometime in late 2010 or first half of 2011. The anonymous post I linked to was made in September of 2010, and I created the MGT account in June 2011 because anonymous posts were no longer allowed and I figured I might need a post breaker. I don't have a closer estimate, sorry.

No problem, but...dare I ask what a "post breaker" is? Is it somehow related to a post hole digger? =)

If you make two posts right after each other (within 10 minutes, I think), the GOG forum tries to merge them (or tried back then, I don't know how its behaviour is now), and the maximum post length is 10000 characters. Thus, if you're making a giant list that needs to span multiple posts, you either need someone else to post in between (a post breaker - my term), or you need to wait ten minutes between each post because the forum will refuse since the merged post would become too long. I used anonymous posts as breakers back then so that I could post the whole shebang quickly before anyone else got around to reply.

if you're as paranoid as me,wouldn't this mean someone can hack/guess a password , then legitimately ask the clueless tech support to deactivate the hacked account full of games purely out of malice, with no financial gain at all?

10 minutes is still correct. That is also the current behavior.

Ah, okay. And yeah, the forum software still has that feature (though it took me ages to realize it did this, as it often takes me more than ten minutes to compose a post...); it even ruined a "joke post" for me recently when I opted to wait several minutes to make the second post, so as to avoid this effect -- and someone else posted before I could. Comedy is nothing without timing! =D

Theoretically, yeah. But if someone's gone to the trouble to get into a GOG user account (not exactly a storehouse of valuable or sensitive information), then unless it's personal, they're probably gonna take the opportunity to buy what they judge to be the most lucrative resellable (if that's a word) games they can before the legitimate account owner/actual credit cardholder/etc. figures out something's up. But yeah, someone who gained access to another user's account could really throw a wrench in things if they had some vendetta against the real user (or were just an irredeemable sociopath). Of course, even then, if the legit account-holder contacted GOG after the fact and could prove they were who they said they were, I would imagine GOG would find some way to reconstitute the account (or the game/movie libraries, anyway).

How about you just read the whole thread?

It would take you less time than it took you to swear, and the answer is only on page 1.

Your eloquence is surpassed only by your complete failure to read the thread.