I thought just as much and part of the reason I posted, to make others aware of a possible scam.

In my case, having the password to my gmail still wouldn't get them in as I use two factor authentication. One does wonder how many people fell for the scam and ... Login to read more.