Of course, people go to the RMT websites, register and get their password taken, or go to the website, get infected with a keylogger and when they go online to look for their money they get taken over, and the RMT has just made money and another account to go botting around for them.
There will be legit sites of course, but the fact that all these bots are peoples stolen accounts kind of just makes it obvious. So sad little kids will be attempting to purchase it with their parents cards just like they did the game. Just hope their not into the fraud business too.