Wow, that's a lot of infected accounts. This is the worst damaging abuse on the platform.

I wonder if there is some way that accounts can be "frozen" or drained of RC when it's confirmed phished account.

I created some accounts and I'm the recovery account. I'll have to look how to recover an account just in case something happen and I need to do it.