I had a friend once receive online credentials for a bank account. Since his email was used, he was able to reset the password and look at the profile of the person. There was a phone number on the account so he called them. Go to find out, this old lady thought she owned that email address because she "claimed" it when she opened the bank account. That might have worked if she were banking with Gmail Savings & Loan. He very easily could have stolen the money in this account if he were a scumbag.