what would be the given punishment to a person who is caught hoarding / trading / giving out usernames? and how would i go about reporting someone doing this? is there a specific way to do it? i'd assume proof is needed, right?