Thanks for the update and posting this here. You could always just ignore it and it will be the user problem for being careless.
It seems like someone wants some free coins without any hard work.
Users should use a strong kind of password if they want it safer.
I recommend to not use passwords from your social media accounts also. There have been a lot of news on how easy this people could just hack on anything under the social media pages.