I am getting spammed via chat by accounts with weird nicknames.
Thanks!

What does PMing have to do with email confirmation?

I'm totally lost here.

He probably hopes that if people had to use an actual email and confirm that it exists they would be too lazy to create tons of fake accounts ;-)

I think they are made by bots... since gog doesnt request email activation link at all.

The best solution and probably only solution that will ever change it, is if/when someone out there creates a massive bot network that creates like 10 million accounts over the weekend and spams 10 billion spam across the forums and PMs or similar. Shit like that gets notice because it becomes an unmistakable problem that can't be ignored. The trickle of problems to date with the existing system simply hasn't become that much of a problem to be considered unmanageable or worthy of spending any more development or administration resources on it more or less I reckon.

I'm not encouraging anyone to go and make such a bot or anything like that, but that's probably what it will take before fixing the problem happens - is it becoming an actual problem beyond a threshold where it starts to matter enough to tip the scales into becoming a priority to fix.

Same logic applies to how much of the population views anti-virus software. I can't tell how many people I've met over the years who didn't have any anti-virus software installed and if you ask them why, their answers were things like "I've never had any viruses on my computer so I don't need an anti-virus". That logic is like saying "I don't need a life insurance policy to protect my family because I've never died before" really, but people don't clue in to that of course. The GOG version would be "we don't need email verification because we've never had a massive bot network attack our service before".

GOG is just not yet to that level of awesomeness to draw in interest from the Russian mafia or other crime networks that do that sort of shit per se. Perhaps we can use it as a yardstick of progress to gauge when we'll start getting more AAA day-1 releases!

They really really should. Aside from the mass-sockpuppet problem, we've also seen several cases of people complaining that all the games they bought on GOG have disappeared, and that they have no purchase notice emails either. It generally turns out that they misstyped their email addresses while signing up, bought games, later tried to log in using their email addresses and failed, eventually having to create a new account with their email address (this time typed correctly) and being ending up with no games or record of having bought them. An email with an activation link is an easy way to prevent signing up with the wrong address in the first place.

Don't get me wrong:

Their own stupid problem! ;)
If you go to a bank to transfer money and YOU enter the target account number wrong, do you get your money back?

For the activation, Yes I agree ;)

EDIT: If they used any payment option, even paysafe you can produce records!!!! So sounds like B...S.... (unless they were even so careless to throw those papers away, which bring me to step 1 )

You can set "conversation is allowed" -> "only for friends" in account settings. Temporarily ofc.

If you mean the accounts are probably created by a bot... wasn't CAPTCHA supposed to counter that? I'm pretty sure a new account gets CAPTCHA when logging into the account the first time.