Account pre-hijacking