It shows like [item worth 1 mil] selling for like [10k] and then when bought, they require user to login thus giving you their password.