I don't know as I'm not running a ticket touting operation, but you're assuming the member isn't the tout in the first place. These people will do the same as the people who tout concert tickets, and have multiple accounts in individual names. As you can generally only buy one ticket per account, my guess is that the tout gives the ultimate buyer access to the account then changes the password. Which is what's been suggested by some on here to transfer tickets to others,
But I'd be surprised if the club hasn't bought tickets off these sites and has found how they do get there.