Hello. Need advice:

I've been talking with a guy for a few months from Facebook, about 6 weeks ago he persuaded me to do some Bitcoin Cloud Mining. He had me purchase 0.1BTC to start mining with and said that each mining cycle would last 300 hours, around 2 weeks. Also that I wouldn't be able to withdraw anything for the first three cycles.
After the first cycle, he then told me I had to deposit another 0.1BTC for that and another for the third cycle. He never told me I'd have to do that at the very beginning. But I would have mined 1.0BTC by the end of the three cycles. He also has my password. Said he needed it any back when I joined Blockchain, so that he could authorize me. he has been in regular contact, which has led me to believe and trust him.

Today the third mining cycle was complete so I should be able to withdraw. He is telling me now that I should get a block reward of 12.5BTC (received an email from a Gmail address saying this), but to withdraw anything, I have to deposit 5.8% of the non-spendable amount in my Blockchain. 5.8% of 13.5BTC is 0.783 (over $3200). An amount that I do not have. And I'm not paying this because I really don't know if I trust this guy.

Is this a scam? I have a bad feeling about this email coming from a Gmail address. And 12.5BTC as a reward seems way too good to be true.
I currently have 0.77BTC as non-spendable in my Blockchain. Should I change my password and keep that in there?
Thanks!