I do understand (and absolutely do not criticise) your motivation.
Of course there is no chance of checking if the request is legit. But I feel that showing here a proove (may it be receipt/bill/e-mail, which may also be faked) is not too much to ask.
And a real thief will not ask here, but just flash the device ...

P.S.:
I absolutely appreciate your efforts not oly to run a one-line statement, but also find out the exact hash, even they are "salted" with smileys by users