If you want RS accounts, always buy legit. Those ones you get on the net are either 'stolen' this way or via a pass stealer virus (with fully encrypted strings + packed executable) that's been circulated on many sites till today. It's undetectable unless you have a software firewall. I used to crack the FTP dumps they stored their stolen passes in to get free RS accounts.. thing is RS changes your pass after 5 diff subnets have logged in within a day.

Your friend won't be able to do this anymore one day, RS adapts quickly