I just got an e-mail saying "click here to confirm resetting your password" from itorrents. I guess someone plugged in my e-mail address, got the password wrong, and clicked the password recovery button.
What kind of half-assed hacker wannabe thinks he's gonna get anywhere trying to do that? It's just sad.
Back when I played Neopets, a common scam (which, unfortunately, many young kids fell for) was "I have a hack for one million neopoints, all you have to do is change your password to <blah>." That would give the scammer easy access to your account, because they then knew your password. The Neopets staff started warning against this scam, so the scammers switched it up. "I have a hack for one million neopoints, all you have to do is change your Neopets contact email to
million_NP_hack@hotmail.com." Because the scammer owned that email address, they'd be able to use the password recovery function to get your password.
So, one time a scammer tried pulling this trick on me. "Change your email and get one million neopoints."
"Ok, I changed it." (*ding* new password recovery email in my inbox)
"Are you sure you changed it?"
"I might have spelled it wrong, let me try again. Ok, I changed it." (*ding* another password recovery email in my inbox)
"It's not working."
"Yeah I'll say, I haven't gotten my million neopoints! Ok, I'll try it one more time. Ok, changed it." (*ding*)
This continued for about an hour until I got bored with the scammer. I think I got more than 10 password recovery emails that day.