Also, his group originated from 2 different IP addresses I think, link that with the phony names and that's a recipe for problems. Violating the GCD could have meant that because those mages were on different ip's he was activating their GCD's "remotely".

Edit: Good luck with getting your accounts back and your GF's! My wife would kill me if I screwed her account so I never ever log in on it.