3 ms·

If they don't do item 1, you could pull off the scam by just staying logged in to the same session forever.