Don't report me for the thumbnail! Never give away your Scratch username and password on an untrusted site, or what happed to Jack may happen to you! Thumbnail made with Paint.net. <-- DON'T TAKE IT AS A LINK! What's phishing? Phishing is a scam where somebody tricks a user into giving sensitive information such as passwords away. Source: Scratch Wiki How do you avoid getting phished? If a website seems suspicious, do not use it. Never input an account password on an untrusted site. Do not use links from suspicious emails, websites, etc. An administrator of a site never needs any account password to fix something on the account. Only tell a trusted adult (such as a parent or guardian) the account password. It is recommended that the account password is changed every few months. Do not use the same password for different sites. One of them might be hacked so that it phishes the account password to be used on the other webpages. Remember to make passwords easy to remember but hard to guess. Source: Scratch Wiki