I've only gotten a couple of those fake "please send us your password" kind of scams but never anything like you describe.

One thing to keep in mind is not to use a screen name that's the same as your e-mail address, and NEVER use the same password for both....same applies to PayPal of course.

Change your passwords often. You may consider keeping your passwords on a post it note instead of a file in case your machine is ever hacked......this assumes you computer is in a place where no untrusted people would have access to it.

Anthony
PS Just remembered, yesterday I got a letter "from" CitiBank wanting me to send my account number and password.....sure buddy, just need to open an account with them first!! Idiots, you'd think they'd go after just CitiBank account holders so as not to raise attention to themselves.