Passphrase does  nothing here. Once you enter your seedphrase and passphrase into a wallet. A scam wallet would have the ability to see that seed phrases and pass phrase and then can simply have custody to your wallet too, this is similar with having to clicking on a phishing site and signing in.

The only security that passphrase has is that when store at a different location from the seed phrases, if the seed phrase is compromised or stolen then the pass phrase will be another layer to stop the hacker from accessing your wallet, but in this situation both phrases are given to the scammer which stops nothing