This seems like a very elaborate way to not get much. I think most people should and would realise this was a scam in some way before they gave away their details. The saving grace even if they didn't is that most people usually have the smarts to use different usernames and passwords for different things. Even still, if you spare one person then that's your good dead for the day done.