More like the kid is ratted, and they used his connection as a proxy to log in to his account, this way it looks like he traded his shit away, and not some hacker.