Its a general rule of thumb... every company with online tech support nvr asks for passwords or even usernames, well mabey usernames if the account screwed up and its not letting your in or something only a admin can change.

If anyone asks both of that reguardless of who is asking via IM or E-Mail.... its a scam. plain and simple.