They don’t buy goods with the gift cards and try to sell the goods. They sell the gift cards for 0.8-0.95 of their value

Pretty nuts that support cannot lock down your account, or at least terminate all sessions

Presumably you use different passwords for everything, but if not, it’s time to start. Also use a different email address for everything too