I actually had my taken once. Someone did a lost password lost email address submission and they were able to give some very obvious public information and were given a password reset to their new email. I was beyond pissed when the person told me how they did it and was honestly considering legal action against skype for the incompetence, but just figured out how to prevent it and moved on. You just need to deposit any amount of funds, since thats one of the questions asked when trying to recover it and if you do that, they won't know and if so, won't know when you did so. No idea if this is still a thing, but just a little rant of mine.