I was just wondering, wouldn't the fraudster need to log into e-mail too to confirm a withdraw. Most people use the same password for minergate account and email account but not all.