I am wondering how TF is verifying ownership and who lost their bitcoins and who didn't.
If he's doing it via users email address, It's stupidity, as anyone can send a fake mail from any account easily.
Inb4peoplestartsendingfakemails.
Email, deposit address and account balance, probably.
*Hackers* also know these things.. right?