Err...I suppose the issue his a bit different - authentication should not get in the way of spending money. Fine then, I have another idea around. Hence the cracker is primary after the money, like attached wallet or money source without authentication or stolen card - its also possible to spoil cracker's slice by putting all immediately purchased games into a cage.

Like if you have 30 games and buy 55 new - those 55 are suspended (whole group), until you confirm your purchase via email. If you purchase 5 more, then they all put into one bucket that is unlocked into account / shown gift codes - only after confirmation of validity via email. So if the cracker gets into account and somehow tries to purchase anything - he/she gets nothing until its confirmed.

RFC?

Nice try ;), but

if he hacked your account, he can change the email address right?

This is a bug, not a feature...

Now that's way more doable.

Regarding the email changes that's a problem that every online store faces. I don't think GOG can fix it. In fact, I don't think they even should. (that doesn't mean they should get lazy about security, tho). Demanding that even email changes can only be done with confirmation via email is enough.

Email providers, on the other hand, really need a way to make sure an user can get back control of a compromised account.

So I went away for a while my mom lives in sweden I myself in the netherlands when I came home my dad had passed away so there was that when things finally started going to normall again I decided to load up some gwent.

Password incorrect ...Password incorrect. okay let me reset the password maybe I forgot it ...Username doesnt excist.
Okay send a ticket to support saying I think someone has taken over my account.

Within a day or so support located my account and gave it back to me (the original owner)

After 2 days of playing the exact same thing again so I contact support again (This was during the tournament on saturday)

After 5 days I get an email saying my account was suspended indefinitely,
as a result of your breach of both the GWENT and GOG.com User
Agreements, which explicitly forbid selling and sharing user accounts.

According to them the person (I) sold it to showed proof of him obtaining the account through purchase with the seller showing my gamertag and everything.

What is weird is first of I wasnt even in the country when this happened I havent been on both the game and discord in ages people in the gwent channel can vouch for this since when I finally did come back on the first thing they said was look who came back from the dead (sort of a bad joke after your dads funeral but they didnt know that)


Now since it says Indefinitely and not permanent how do I fix this whats the best thing I can do. Like i told support I bought 291 kegs before I left ..why the hell would I even consider to sell something I invest so much time and money in. I contacted the guy who claims he bought the account but of course he is not replying at all and I dont want to wait around for ghosts