Explain what you mean by hijacked accounts - how does that happen and why would the scammer not just set up a fake account?