That's a different problem though. It's doing it on their behalf, not on behalf of a scammer who's impersonating them.

Until their computer is taken over....