ePassporte, just as with PayPal, allows you to move money to someone with simply a username (or with PayPal, an email address).
This is why it is important to know your affiliates. Just as Visa has the know your customer rule, you should know your affiliates.
Nice catch on the part of TCG.
eP Risk Management will be hearing about this guy.