DR Resolved @ericok vs. @CodiBot

Username: @ericok

Please create your Dispute title using the format in the description below. @ericok vs. @CodiBot

Are you the buyer or seller? Buyer

What is the date the incident took place? Apr 8, 2026

What is the name of the accused? @CodiBot

Did you encounter the accused on BlackHat World? Yes

Have you started a chargeback with your bank or a Dispute with the payment provider over the transaction? No

Have you contacted the accused via DM (direct message) here on BlackHat World? Yes

Have you informed the accused of the Dispute? Yes

Please add the URL (link) to the location the transaction took place here on BlackHat World.
https://www.blackhatworld.com/seo/wtb-aws-account.1805398/#post-20628261

What product category best describes the product/service involved in your Dispute? Account buying/selling

What is the USD amount involved in your Dispute? $3200

Please describe the reason for submitting a Dispute, in detail.
I purchased an AWS SES account with $25,000 credits from @CodiBot for $3,200. The seller provided the account email ([email protected]), password, and an MFA recovery code. However, the MFA code provided is completely invalid — AWS returns an "Authentication failed" error every time I attempt to log in using it. I have never been able to access the account even once since purchase. When I reported this to the seller on Telegram, he falsely claimed that I had changed the 2FA myself. This is technically impossible: the seller never provided me with access to the email inbox ([email protected]) — I only received the email address, not the email password. According to AWS official documentation, modifying or resetting MFA on a root account requires both email verification AND phone number verification. Since I had zero access to the email inbox, I had absolutely no ability to modify the MFA device at any point. The seller retains full control of the email and phone number, meaning he can reclaim the account at any time. This is a deliberate scam — the seller provided a fake/invalid MFA code while keeping the real one, making it impossible for me to ever access the account.

Please detail exactly how you have tried to resolve your issue before now.
I immediately contacted the seller on Telegram after discovering the MFA code was invalid. I provided screenshots showing the AWS authentication failure. The seller refused to take responsibility and instead accused me of changing the 2FA myself, which is technically impossible as I never had access to the registered email inbox. The seller has not offered any refund or replacement account. I have attached chat logs and the AWS login failure screenshot as evidence.Additionally, the seller has deleted the entire Telegram conversation history, likely to destroy evidence. I only managed to save one screenshot before the messages were deleted.

What kind of outcome are you looking for from this Dispute?
I am requesting a full refund of $3,200. The seller provided an AWS account with an invalid MFA code, making it completely inaccessible. I have never been able to log in even once. The seller's claim that I changed the 2FA is false and technically impossible given that I never had access to the registered email.

Please paste any URLs that point to evidence for your Dispute.


Please upload any screenshots, videos, or other document files that point to the required evidence.


Please confirm you have sent a DM, here on BHW, to the accused? Yes

Please confirm there has been a 24 hour period between informing the accused of the dispute and right now? Yes

Please confirm that the transaction started on BHW via DM, sales thread, WTB/HAF threads, advertisement or signature. Yes

Please confirm that you have provided evidence of the transaction via URL, screen shot or video. Yes

Please confirm that you have explained what the dispute is about, in detail. Yes

Please confirm you have added all supporting evidence to show that you have a case for a dispute. Yes

By pressing the Submit button on this form, you certify that you have completed every step.

You acknowledge that skipping any of the requirements or failing to attach evidence that supports your case could result in this Dispute not only being deleted, but your account being given a warning. Yes

Information For The Accused
@CodiBot, you have 24 hours to respond to this disputes thread. If you do not respond within 24 hours or we note that you're engaging in any other activities on the forum rather than dealing with this dispute, the decision will be made in favour of the dispute starter and you will be permanently banned from Black Hat World. In the event that you're permanently banned from the forum, you may send in a support ticket using our support channel only once you've refunded and/or provided what the plaintiff has requested.

If your responses to this dispute do not remain prompt, your account will be banned.

Information For The Accused & The Dispute Starter
Please remain professional as name calling, insults, griping, tu quoque, and ad hominem will not be tolerated. Should the dispute starter resort to this, the dispute will be forfeit; and if the accused resorts to this, the dispute will automatically be in the dispute starter's favour.

If the focus of this thread shifts from trying to resolve the dispute to simply wanting to see the other party banned, the dispute will automatically be ruled in favour of the other party.

The moderator mediating this dispute is simply trying to fair a resolution to this dispute. Any mod abuse or accusations (e.g., "you're biased", "you're protecting scammers", etc) directed toward the moderator will not be tolerated and may result in an infraction for mod abuse.

Information For Other Members
If anyone else has the same issue with the accused, you may respond so long as you supply evidence in the form of screenshots, videos, etc.

Please bear in mind Dispute Resolution section rule #4 before responding.

"If you are not directly related to the situation, or are not offering information directly related to the situation: do not post in the thread. Anyone caught doing so will receive an infraction and be reply banned from posting in the thread."

Information For Everyone
Black Hat World staff members will not contact you outside of BHW at any point regarding your dispute. BHW staff members do not use Telegram, Skype, Discord, Whatsapp, etc under any circumstances. If someone contacts you on any of these third-party platforms claiming to be a staff member, block them immediately.

@ericok I'm going to keep this dispute open for another 24 hours as @CodiBot hasn't been online since it was posted.

The accused has been permanently banned from Black Hat World for failing to resolve this dispute.

The dispute thread will remain live and is now open to commentary as rule 4 is no longer enforced in this thread.

He lost a 2007 account for a measly 3.2k.

I think now is the time that BHW should introduce Middleman Service for atleast Crypto Payment made on Marketplace atleast payment above $100 shound be through Middleman on BHW , so buyers get protection and seller got the protection of their money , Hope this feedback will be taken seriously by Administrator

h3yf00l said:

I think now is the time that BHW should introduce Middleman Service for atleast Crypto Payment made on Marketplace atleast payment above $100 shound be through Middleman on BHW , so buyers get protection and seller got the protection of their money , Hope this feedback will be taken seriously by Administrator

Click to expand...

There is an active crypto escrow BST on BHW which everyone seems to ignore.

It is honestly shocking to see someone throw away a 2007 account for a $3,200 exit scam.

For the sake of transparency, @CodiBot was a registered agent on our escrow protocol. We have a zero-tolerance policy for this kind of behavior, regardless of whether it happened on-chain or off-platform.

Following this ban, we will be submitting a DAO proposal to officially deactivate them from our agent registry and slash their stakes. We believe escrow agents should be held to the highest standard, and this is exactly why we have slashing mechanisms in place.

Zenland said:

It is honestly shocking to see someone throw away a 2007 account for a $3,200 exit scam.

For the sake of transparency, @CodiBot was a registered agent on our escrow protocol. We have a zero-tolerance policy for this kind of behavior, regardless of whether it happened on-chain or off-platform.

Following this ban, we will be submitting a DAO proposal to officially deactivate them from our agent registry and slash their stakes. We believe escrow agents should be held to the highest standard, and this is exactly why we have slashing mechanisms in place.

Click to expand...

TBH it doesn't look good to me, when i looked at your thread and seen codibot there now, as your product is meant to prevent that from the looks of things, yet....?

Whats the simple reason this still happened? (without using too much block chain tech talk) Didn't codibot use you for this transaction in particular?

Panther28 said:

TBH it doesn't look good to me, when i looked at your thread and seen codibot there now, as your product is meant to prevent that from the looks of things, yet....?

Whats the simple reason this still happened? (without using too much block chain tech talk) Didn't codibot use you for this transaction in particular?

Click to expand...

Fair question. Short answer: this didn’t happen through our escrow.

The deal was done privately (Telegram + direct payment), so our system was never involved - no contract was created, no funds were locked, and no mediation was possible on our side.

On our platform, CodiBot only handled 2 escrows, both completed without disputes, and they never acted as a mediator in any case.

If this transaction had gone through escrow, the buyer wouldn’t have released funds until access was confirmed - which is exactly what escrow is meant to prevent.

Regardless, we’re still removing them from our registry. If someone associated with us pulls something like this anywhere, we don’t keep them.

I’m somewhat new on this forum. Are middlemen not used here much? For most deals on other forums I’m on, people use a middleman, especially if the transaction is $200 or higher

Lune said:

I’m somewhat new on this forum. Are middlemen not used here much? For most deals on other forums I’m on, people use a middleman, especially if the transaction is $200 or higher

Click to expand...

They should be. However, we have a lot of people who seem allergic to Escrow for a variety of reasons (expense, don't think they need it, don't know it exists, etc).

notNewB said:

There is an active crypto escrow BST on BHW which everyone seems to ignore.

Click to expand...

Because its useless/bad.

GermanCPA said:

Because its useless/bad.

Click to expand...

Did you personally have a bad experience with them?

notNewB said:

Did you personally have a bad experience with them?

Click to expand...

Kinda'ish. I asked some people (outside of BHW) to use this as escrow and they all think its a scam and dont understand what it is. It's also the reason nobody uses it here; its too technical and not marketed correctly.