Make a rule about selling accounts.

[ABlueJelly]

The people who let it hit them multiple times are the ones that worry me... Doctor, it hurts when I do this! *punches self in the crotch*

Anyways, it's shady, like Joe said. Half the time I expect the account salesmen to be some corrupt chinese goldfarmer that got lost when he selected what game to play.
Banning it outright is dumb- as Joe said, it's shady, and as I said at the beginning of this post: Doctor, it hurts when I do this! Imo, freedom to be stupid is a good freedom to have.

Also, really, this is one of those things that you have to think... How do I enforce this? heRO isn't the real world, and it's not the only thing on the internet. You can discuss transactions like this in private- in person, IM, facebook, etc. And without hindering other people's playing experience, you can't really tell if an email change or a password change was done by the original account holder or someone else. Selling to someone in a different time zone? Oh, my work schedule changed. Really, there's 9135837234 different excuses you could come up with to justify some change that would require evidence too personal to demand to confirm.

Actually, that's with a lot of stuff. Exchanging real goods for RO goods- you can't really tell if the person's being kind, generous, repaying a favor, or just giving stuff away.
Honestly, I'm pretty sure this rule's here just to cover their ass in case someone gets screwed doing it and decides to, in "good" American tradition, "Sue the bastards".

Anyways, when communication outside of the game is possible, things like this aren't really truly able to enforce outside of *within* the game. And as is... If you wanna risk it, you can risk it, why make the GMs dredge more logs for more stuff?