Well, it would be really obvious and I think GM's are smarter than that.
moreover its not about bulk ordering even if someone orders 2-3 items it should be authorised that the account holder is doing it not some random person.
they ask u to post ur ign and account name is most of the events. ppl can easily find it.
when bulk accounts got hacked earlier it was due to these kinda lists they ask for in events and tournaments.
need to make yang exchange more authorised