I have no idea if this theory is plausable or not but here goes;
Right well, those spambots that we all see in ironforge and orgrimmar are probably 10-day trials, right?
Well, what about the actual Gold Storage Characters they have... They must be paid accounts!
So, I was thinking that if you could somehow get one of the Representatives of a gold selling company to enter their character details that houses all the gold into a self-made Phishing website, maybe you could 'steal ther goldz'.
So, basically:
1. Login to Live Chat Support.
2. Ask them to look at their "Gold Expenditure Report" or some other crap on your Phishing website (Disguised as Blizzard..)
3. You logon to their account and launder the gold through AH/Trade or whatever and throw a party.
Clearly needs some tweaking, but...maybe our scamming boffins can have a crack at this?