They handed my account over
GoDaddy did this exact thing to me about ten years ago. Someone faked a death certificate for me and they handed him my my entire portfolio. They never tried to call me, e-mail me, or send me a letter in the post. When I called and they told me what had happened (you can imagine how livid I was!) they asked me to provide proof that it was me. I had to fax them my passport, driver's licence, and a declaration -- more proof than the person who had faked the death certificate. Obviously, I immediately transferred all my domains and never looked back.