And I indeed asked why there was a hurry to sell and the answer was that he needed to liquidate the funds and did not want to wait for 3 more days before the tokens are unstaked, plus wait until exchanges open up for trade. It made sense to me. As I have been in situations before where I needed shorterm liquidity. There could be a variety or reasons why he has this need.

The deal was for 30% below market rate (4 BTC for 3490 EOS), which you could argue is too good to be true. But you could also argue that it is an appropriate rate for facilitating a rather large chunk of liqudity to someone who is in need for that liqudity. Especially for a volatile asset that at the moment of the transfer is illiquid / cannot be traded. I have seen far wider spreads in the crypto market.

And there's a myrid of questions that result from that argumet. Why did the original holder of the account get scammed in the first place? Did he maybe trust somebody who was not to be trusted? Did he trust something that was "too good to be true"? Where is the line between too good to be true and a fair deal? Who is now to take the loss? The first person who got scammed or the second person who got scammed? Who is to decide? Who decides what a scam is?

I can only repeat that I did my due diligence in order to make sure that the transfer itself was completely trustless, that I didn't expose my private keys and that I followed the rules and regulations known to me at the time of the transfer. I had an escrow in place and I learned all the relevant technicalities of a completely new blockchain in order to be able to verify the transaction myself.

Why is buying an account trustlessly any different than buying tokens trustlessly? The result is exactly the same: The funds can now be spent by a new set of private keys. And if account transfer is always shady, then why is it baked into the very fabric of the EOS blockchain? I don't know any other blockchain where an account transfer can be done trustlessly. I don't know any other blockchain that even has accounts that can be linked to public-private key pairs and transferred between them with one command line prompt.

This is all new territory. We are all learning. I just don't see what I did wrong that now warrants for me to get punished by loosing all my funds.

How would you feel if you made a transaction in good faith and then wake up in the morning and all your funds are frozen by a third party that was not involved in the transaction?