I don't know about you guys, but to me that does sound a little dodgy - or has anyone else had an experience like this?

It does seem like information that a phishing scam would want, doesn't it?