If I implied that he was a crook, that was not my intention. I really don't think he is scamming - I do believe his claim that he provided his password and PIN to that phishing site. Basically: always encrypt your information, and never finalize early. <-- those two things, if everyone practiced them, would make a huge impact on the number of scams around here.