This has been a very old method through which people's online wallets and exchange wallet were asked. I never thought anyone in cryptocurrency world will still fall for it. I think is now very pertinent that one knows the websites he or she want to visit offhand before inputting or creating a password on them.