Scam involving old Google accounts

“Gmail account from 2000,” but the account delivered was only 10 days old
——Following the trail and digging into the entire network of sites behind MJJ Faka

Recently, I wanted to buy an old Google account. I placed an order on a card-selling site called “MJJ Faka” and got a thorough lesson in how this works. The amount of money was small, but what lies behind this store is worth exposing to warn others.

  1. What happened

The product was this one from their site (URL: mjj.728.hk/buy/96):

“Super-old, stable Google account Gmail mailbox | Old Google personal account from 2000–2014, United States, 2FA verification, login included, automatic delivery, suitable for long-term use,” priced at 11 yuan.

After payment, it was delivered automatically in the format “email—password—recovery email----2FA link.” The account could be logged into, but I thought I should double-check and looked up when the Gmail account had been created—the result showed that it had only been registered about 10 days earlier.

Advertised as an old account from 2000–2014, it was actually a new account registered in mid-October 2026. It was not the product advertised.

I contacted after-sales support: the site only provides a Telegram customer-service account, username fakamjj, and I never received a reply from a real person. Its own after-sales terms say that “obvious abnormalities in the delivered content” can be handled—a new account pretending to be a ten-year-old account surely qualifies as an “obvious abnormality,” right? But no one responds, making this clause nothing more than window dressing.

  1. Not an isolated case: someone fell into the same trap just half a month ago

Before publishing this article, I searched around and found that someone had posted on V2EX on October 16, 2026, after buying from the same store and purchasing the same product (post: v2ex.com/t/1249291). The account they received had been registered on October 3, 2026. When they contacted customer service on Telegram, they reported that “the online account simply never replies—there’s no after-sales support at all.”

In other words, this was not a “shipping error.” This is how the product is consistently sold: new accounts are registered in bulk, packaged and sold as old accounts, with the seller betting that buyers will not check—or will be unable to find anyone even if they do.

  1. A “Gmail account registered in 2000” simply cannot exist

There is an even more basic flaw that I only realized after buying it: Gmail was not launched until April 2004. An account ending in @gmail.com could not have been registered in 2000–2003. The title of this product was a lie from its very first character—and the store has more than a hundred such items in stock, continuing to sell them as usual.

  1. It is not one store, but an entire network of sites

Digging further, I found that mjj.728.hk is just the tip of the iceberg. The 728.hk domain hosts a whole string of card-selling sites whose product catalogs and inventories are almost identical:

728.hk — “728 Faka” (main site)
mjj.728.hk — “MJJ Faka”
top.728.hk — “Tianma / 728 Flagship Store”
store.728.hk — “Totoro / 728 Mall”
hub.728.hk — “Hummingbird / 728 Hub”
web.728.hk — “Skylark / 728 Online”
fk.728.hk — “FK Faka”

The main site, MJJ, and Tianma all use the same customer-service account, fakamjj. Its restocking channel, fakamtuijian888 (with over 700 subscribers; its full name is fakatuijian888), promotes only MJJ’s products and lists the same customer-service account—the promotions, stores, and after-sales support (fake though it is) form a single closed loop. Other customer-service accounts within the same network include efakashop, kakamall, and openaibest.

The footers of these sites all point to the same upstream provider, “Dujiao Card Mall” (URL: shop.dujiaoshuka.top), and their catalogs and prices match. Put simply: the same goods and the same people have set up a string of storefronts; when one is exposed, they switch to another subdomain and continue selling.

Public WHOIS information shows that 728.hk was registered on August 18, 2020, with the registrant’s name listed as “梁忠军” (Note: the registration email addresses recorded by two information sources differ by one digit, and the authenticity of the registration information cannot be verified. This is cited only as a public record and is not an accusation against the individual).

  1. Before buying an account, learn how to check its registration date

This is the most useful part of this article. Google does not officially provide a way to check an account’s creation date, but there are three ways to infer it:

  1. POP date method: In desktop Gmail, go to Settings, select See all settings, find “Forwarding and POP/IMAP,” and look for the line “POP is enabled for all mail that has arrived since [date].” This date is generally the account’s creation date (provided the POP settings have not been changed).

  2. Welcome email method: Search the mailbox for the “Welcome to Gmail” email sent by Google on the day the account was registered. The email date is the registration date (assuming it has not been deleted).

  3. Takeout method: The V2EX victim said that the Gmail registration time can also be found in the data exported through Google Takeout.

The key step: check the date as soon as you receive the account, then confirm receipt. You do not get that opportunity when buying from a card-selling site—delivery is automatic, the transaction is treated as complete, and customer service pretends not to see anything. A safer option is a transaction with platform escrow (for example, Xianyu): the money is held by the platform, you confirm receipt after inspecting the goods, and you can request platform intervention if the product does not match the listing. This is the consensus among people in the community who have bought such accounts.

  1. Avoidance list (save this and compare it before placing an order)

Domains: 728.hk and all its subdomains (mjj, top, store, hub, web, fk, etc.)
TG customer service: fakamjj, efakashop, kakamall, openaibest
TG channel: fakatuijian888
Upstream provider: shop.dujiaoshuka.top (Dujiao Card Mall)

Domains can be changed at any time, but changing customer-service accounts and supply sources is more costly. Checking the account names is more reliable than checking the domain names.

  1. One final word of common sense

Eleven yuan is not much; consider it a lesson learned. But this store is still selling the product, with more than a hundred units in stock, and the channel is still pushing promotions every day. Most people who buy Google accounts do so for convenience—who would think to check the registration date first? I am publishing this in the hope that the next person will see it before making a payment.

One more reminder: never use a purchased account as your primary account. The seller retains the original registration information and recovery email and can reclaim it through an appeal at any time. Even changing the password will not protect you. An account like this should only be used for things you would not regret losing.

October 28, 2026

9 Likes

Trying to grab a bargain, huh? An old account couldn’t possibly be this cheap. A new account costs around 11 yuan.

2 Likes

Indeed, I’m thinking of giving it a try.

2 Likes

This was never guaranteed in the first place. It’s fine if you happen to encounter someone reliable.

1 Like

Yeah, bro.

It’s probably better to register your own account and build it up yourself.

Don’t be tempted by small savings—if you can, it’s more reliable to register yourself.

An account that’s been around for over ten years couldn’t possibly cost less than 100 yuan. If you’re trying to grab a cheap deal, bluntly, you get what you deserve.

2 Likes

Thanks for the insightful analysis.

Exactly, I just posted it as a reminder.

A warning is warranted, and the merchant should at least bear primary responsibility for the false advertising.

This investigation is quite thorough, and following the domain and payment trail was exactly the right approach. Two additional points for future buyers: First, many so-called “accounts from 2000” are actually newly registered accounts disguised with old profile pictures and signatures. The safest way to verify the creation date or history of linked devices is to use Google’s official account recovery or support ticket process. Second, for virtual goods like these, it’s best to use an escrow service on a platform that supports dispute resolution rather than transferring money directly to an individual. If something goes wrong, the money is usually impossible to recover. Thanks to the original poster for sharing these details after learning the hard way—you’ve already helped many people avoid scams.

2 Likes

As long as it works…

Is there any use for an old account?

老号是可以造假的

This account was obviously just created. Even Gmail didn’t exist until 2004—does the seller not even know this basic fact? Is checking the registration date something everyone overlooks?

How are people still buying accounts when the risk controls are this strict? :face_with_monocle:

AI啊,用了丢的。经常薅google的手里都不少于10个吧:joy:

号可以怎么用

我记得nd里面就有人说过这个mjj是个骗子,不过我确实花20抽奖了个10年注册的号

现在确实超极严 自己搞不太容易成功 图省事的话也容易被骗