If something like this would happen to me and they wanted my wow account I would have given the password right away!
Because I can the secret password and all the other info to the account so I can take it back whenever I want