Well, since you can no longer scam people out of their passwords because of blizzard's message in the chat rooms (you have typed your pass, blizz will never ask for it), instead get their email address. chances are they registered their accnt with this email, and after you get that change it to your email address, and hit get new password. This SHOULD work, as you do not need a password to change the email address. This would work exceptionally well if someone was selling items via paypal. blizz might perform a cdkey check tho and will only change email if cdkey registered accnt with matches current key.