The links often have keylogges and/or spyware attached to them so whoever sent it to you can look through your comp. If sooner reports his account being stolen with proof of purchase with it (Credit card if online, a picture of the serial number if a hard copy) he can get his account back, assuming it wasn't vac banned. If it was vacced, wouldn't matter if he got it back or not