This is an idea that I use every time I scam an account. I searched and did not find any thing like this post, so I don't think it's a
Okay so, after you have scammed an account, (this works best with DND scam or any scam you don't have their e-mail address) Don't change their account information to yours. They don't suspect anything since you did not change any info. You only go on their account when you are sure they are not logged on. You don't empty their account. You just take small amounts of gold and few items over time. (if you take everything at once, they will notice and change password) If you empty it all at once, they will change password, and who knows what they might have on their account in the future.