[stumped]

all that's in the gmail account is the purchase receipt.
all that is in the kobo account is the book, which incidentally is only still 1% read ( and that 1% was me, on PC checking that book really exists

if anyone had gotten into the gmail [ so unlikely as it was only created a month ago, I'd be seeing google security alerts about new sign-ins, sent to my recovery account

I think kobo have placed the book, and the receipt, in the wrong account. hence the lack of billing address and lack of reading activity. [ yes, the mystery buyer could have bought it then immediately gone offline forever, btu that feels very unlikely] if kobo are like other companies, they will clam up if challenged about fraud, and will not disclose when, where, how their account was accessed. I sort of know the when, if it was just before the purchase receipt email time and date