If you feel like someone is trying to scam your account, simply report and block them.
Never hand out any personal information or account information, not even to staff members. (unless you are submitting a support ticket and it's required for what you need help with)