That type of hack doesn’t require the user/password. It’s also on the same league as the Nigerian Prince, just appealing to kindness rather than greed.

Idiots fall for these scams all the time, password not needed.