My friend recently lost his security token. According to SE after they verify you are indeed the account holder they will remove the security code question in order to access your account. My friend has told me he is not the original account holder and is afraid that if he tries to verify he is the owner he will end up getting it suspended.
My question is has anyone gone through this process? What information do they ask so they can verify ownership. I used to think it was credit card details and what personal information you have entered on your play online profile, but I'm hoping they don't want the CD-key from the original package or something else ridiculous.