It depends on if that is the email adress you are using for your VIP subscription if it is you VIP email, then yes they can hack you. If you give them an email that is unrelated to your VIP subscription then no they can not.

I posted this in a different thread, but it's relevant here, so I'll repost it:

Rules in Graal only serve as a guideline, staff all have a good dose of common sense too to go with it.

Just because scamming is not explicitly prohibited in writing doesn't make it any more acceptable. My belief is that any action that defrauds or otherwise deceives another player and makes them lose something without their express consent or knowing for the gain of the scammer should be punishable.

This includes things like offering to farm but stealing gralats instead, or offering trades but not upholding your side of the deal when the other person has.

And that's the minor types of scams.

I have seen players openly scamming other players for private information, and thinking they're safe to do so.

I once caught a player in the act of asking a lot of other players for their Device ID numbers and iTunes login information. When warned, he replied "scamming isn't against the rules, u can't ban me, dumb***".

Normally, I would have just issued a simple warning for this, but the scammer's attitude and the fact that he had already obtained login data landed him a month-long IP-ban.

We get a lot of messages from scam victims asking to recover their lost items, but the important thing is that staff cannot return anything you lose if you fall victim to a scam. Your account information's safety is your own responsibility. It is your choice who to trust, and you should face any consequences.

Don't be fooled by greed. Remember - If an offer sounds too good to be true, then it probably is. No matter what they offer you; free VIP, free gralat packs, always be vigilant.

The best staff can do is disable scammers and prevent them from harming other players. We cannot get things back once the damage has already been done. We can't erase your login information from scammers' devices once you hand it over to them yourself.

IP Bans have been got out of by some players by resetting their router, account bans are more affective.

I have a pic of a udid scammer his name was XxrivernightxX something like that I can show if you want

Maybe
 

If your using a vip account then yes. But if you choose revoke access that needs an approval before they can use it

The thing i'm mad about is, on iEra and iClassic, i was banned for 3 days for supposedly "TRicking someone into giving me their UDID" When i never asked anyone. They said they had evidence, but they didnt. So they really just banned me without proof, or they had fake proof.

Dont use emails they give you. Once you use there vip they transfer stats snd revoke access.

Example of this scamming in action:

http://www.graalians.com/forums/showthread.php?t=4779

Who wants my udid number im giving my account away

Haha sure... with that you are giving away almost your whole iPod/iPad/iPhone.

Lol? If they give you their UDID, though, they could hack you. I know someone who could easily hack you if they give you their UDID.

Not possible, until they give you an app aswell which records your UDID and sends the data to them.

Actually, it is possible.

Graal is not the only app that uses UDID as a login for accounts.

If your UDID is in the hands of someone else, they can hack into your accounts on any other app that uses it to identify you. And if that app is used for shopping (with your credit card details recorded in it) or anything else that requires your personal information, then you will have given all that information away too.

Most people don't understand that UDID isn't simply Graal's login system, it is your device's and some of its apps' complete identity.

As far as I know it won´t work for iTunes so calm down guys ^^ Don´t know on which apps that does actually work but I think they are all (at least the most known ones) secured good enough.