This is done all the time to sell games that aren’t available as CD keys, against TOS.
The seller usually gives you a login to a webmail they control, and the account is tied to that email. You can then change the email on the account and you have access to the original email to confirm the move.