I didn't call it a scam.

And, I noted that there are legitimate exceptions.

I was simply answering your question, and giving my take on what the previous commenter meant with his/her comment.

I also called attention to the fact that, if they REALLY knew their stuff, and took security seriously, they would NOT send both the user ID and the password in the same email.

No one tasked with security would ever do such a thing. I used to work in credit card fraud, and what I stated was accurate. This was also stated in response to what the previous commenter said.

I stand by my comment.