Sep 5, 2013
Guessing the e-mail address isn't too difficult. In many cases, the account "stealer" will work up a conversation with the person first and pry their e-mail address out of them using such bait as "Hey, I saw this really cool website about the game while browsing yesterday. It's a pain in the but to type out the whole address on the PS3, but if you want I can copy and paste it into an e-mail for you." The sucker then thinks "Sure! There are no issues there.' and the e-mail address is given away.
In addition, the scammer can likely find out about other websites the sucker uses or posts in, what their username is from that website, their Facebook account, or many other places where the sucker hasn't thought too much about security and has information publicly available. At that point, it's just a matter of making the right guess.
true enough some gumbas actually post their info in posts