We’ve all been there—tempted by the allure of skipping the grind and instantly acquiring a powerful character that someone else spent ages building. This desire fuels the rampant 'account trading' market.

However, this market is haunted by a particular myth: the 'Invincible Original Owner' theory. The legend goes that even if the original owner reclaims the account by resetting the password after selling it, they cannot be punished because game company terms and conditions strictly forbid such trades in the first place.

But is this invincibility theory actually legally sound? Let’s dig through the precedents to find out.

The most intuitive legal challenge regarding account trading is criminal fraud under the Penal Code.

If it is proven that the seller had 'fraudulent intent'—meaning they had no intention or ability to hand over the account but simply wanted to snatch the money—they will face harsh penalties. This typically applies to those who sell non-existent accounts or vanish after taking the payment.

Even if the account was handed over, if the seller harbored a secret plan to 'reset the password and take it back in a few days,' this is viewed as a clear act of deception, and the hammer of fraud charges will surely fall. In short, if they never intended to fully relinquish the account, the legal verdict is relatively straightforward.

However, the most frequent and problematic disputes arise when an account is sold legitimately, only for the seller to suddenly change the password to 'reclaim' it, or to sneak in and strip away valuable items the buyer spent significant time and money to acquire.

The real courtroom battlefield is whether the act of interfering with an account already in someone else’s possession constitutes computer fraud.

Computer fraud is defined as acquiring pecuniary benefits by inputting or altering information without authorization. The conflicting rulings hinge on a single question: 'Based on whom do we judge the lack of access authority?'

Rulings that lean toward conviction focus on the private trust relationship with the buyer and the objective monetary value of the account itself.

Take, for instance, the Seoul Northern District Court judgment from November 22, 2024 (Case 2024Gojung509), which highlights this exact situation.

The defendant sold an account for 600,000 KRW, only to sneak back in two weeks later via mobile verification to reset the password. The defendant then liquidated 3,626,000 KRW worth of in-game items the victim had purchased. The same defendant pulled a similar stunt on another victim after selling an account for 380,000 KRW.

The court clearly ruled this as unauthorized input into an information processing system to gain financial benefit, sentencing the defendant to a fine of 3,000,000 KRW.

On the other hand, there are many precedents where the court acquits the original owner, using the relationship with the 'game service provider' as the absolute benchmark for judgment.

The Incheon District Court judgment on November 6, 2020 (Case 2020No34) illustrates this perspective perfectly.

In this case, the game company strictly prohibited the trading or transfer of user IDs through their terms of service. The court reasoned that unless the company formally approved the transfer and changed the name on the account, the 'legitimate' access authority remained with the original creator.

In other words, since the seller only made a private agreement with the buyer not to exercise their rights, accessing their own account to liquidate assets was not deemed 'unauthorized' input under the law, resulting in an acquittal.

Let’s also examine the Daegu District Court judgment from December 3, 2009 (Case 2009No3339), which serves as a cornerstone for the 'Invincible Original Owner' theory.

The defendant sold an account for 5,000,000 KRW, providing a signed waiver and even a copy of their resident registration certificate to prove intent. Yet, the defendant later used their public key certificate to reset the password.

The court pointed out that the terms of service forbade the trade, asserting that the only entity authorized to grant access is the service provider.

Consequently, the court ruled that because the buyer had no legitimate access rights while the original creator did, the defendant’s act of resetting the password did not constitute the 'damage of another’s information' prohibited by law. Acquittal followed.

Even more shocking is the legal interpretation from the Suwon District Court Anyang Branch on January 25, 2024 (Case 2023Gojung202).

In this case, the defendant, who purchased a hacked account, was fined 700,000 KRW. The court reaffirmed that only the game company can grant legitimate access rights.

Since the terms of service explicitly prohibited transfers, the court judged that even if money was exchanged, the buyer had no inherent right to access an account registered to a third party without the company’s consent.

The defendant argued they were unaware the account was hacked, but the court maintained that anyone other than the original creator lacks the fundamental right to access it.

This ruling painfully illustrates the grave legal risks faced by account buyers.

Even if you genuinely believe you’ve paid for and received an account, if it turns out to be a hacked account and the original owner files a report, you could find yourself branded a criminal for unauthorized network intrusion overnight. The buyer’s authority is essentially negated by the game company’s terms.

Regardless of fraud charges, in the eyes of the Information and Communications Network Act, the buyer’s rights are completely voided, while the original owner’s status is absolutely protected. It’s a legal loophole that cements the 'Invincible Original Owner' theory.

In conclusion, the 'Invincible Original Owner' theory is at least half-true. While clear fraudulent intent leads to criminal charges and civil liabilities, the original owner isn't entirely untouchable by the law.

However, as the majority of precedents regarding network intrusion show, as long as game companies prohibit trading, it is nearly impossible for a buyer to be fully protected. You risk being labeled a hacker based on a single malicious report from the original owner. Even if you clear your name after a grueling legal battle, the lost time, money, and stress remain yours alone to bear.

Despite this, account trading has long been an everyday culture and a massive market among gamers. Given the real-world value of digital assets built with massive time and money, dismissing all disputes as 'mere user misconduct for violating terms' is not a viable solution.

It is time to move past the outdated regulations of blanket bans and punishment. We need serious social discourse on rationalizing the market, refining the system, and protecting the legitimate property rights of users within the bounds of the law.