Staff never ask for your password — not in a message, not in a trade, not ever. Anyone who does is not one of them.