Then they went on to explain that they need my login, passwords, private keys to my crypto wallets need to be clearly visible in order for them to "refund" my ETH.
I will repeat what I said in a follow up email they specifically asked me for my login credentials/keys and I am willing to let somebody verify it.
You might want to back that up by a video of some sort
[if you can hide sensitive parts] or at least a cropped SS...
We in no way want to have access to your personal passwords and other confidential information.
Kamakaziii mentioned about requesting for his/her private keys on a follow-up email
[still waiting for the evidence]... Is this part of your so-called "system request" or you're denying it?
However, we need to ensure that the funds are legal in order to exchange or return them back to you.
5. Refund Policy
~Snipped~
Regardless the side of the transaction’s error, we never ask a client to go through the KYC process.
Not sure if I'm missing something but I believe, the above two statements contradict each other.