
On a similar theme ....
My lad got very into an online (not XBox) RPG, and found a website where you could "buy" (with *real* money) "gold" for use in said game. There was an online outfit with an obvious domain name where you paid up via paypal, and then they went "in game" and traded the gold with you. Which seemed distinctly whiffy to me - quite against the games T&Cs, although I was surprised they hadn't contested the sites domain name. Anyway, son asked me to cough up - I took his money and warned him no good would come of it. He got his gold, and a few hours later, his account was hacked, and all his gold and "stuff" had gone.
I can only presume that this outfit paid (peanuts) to gamers who built up the gold, for them to sell - against the main sites T&Cs, so anyone dealing with them risked their account anyway.