Inadvertently assisted the theft of a domain
I once found myself inadvertently helping someone steal a domain.
I visited a shop to help the owner/manager recover his domain from an ex-employee that set it up.
The website was definitely for the shop I was actually sat in, everything checked out... shop name, address, phone number was the same as above the door. The manager had access to the sales/admin emails so we were able to reset passwords and transfer domain ownership. The manager was a key holder, the shop was open and staff / customers were milling about.
Couldn't really get much more proof of ownership than that. Did the job, got paid, emailed a receipt.
Turns out that the 'manager' and some of the team were actually staff that were about to leave and set up on their own. He was sabotaging the website and social network accounts on the way out.
My email receipt reached the 'real' boss, who aggressively threatened all sorts of things. I tactfully reminded him that I'd done what the manager in the shop had asked me to do, and that I didn't know this person on the phone. If he could provide proof of business ownership (not a ltd company) I'd gladly switch it back and he could claim the cost from the rogue employees. I didn't hear anything else.
Who do you trust?