It is a common scam in security circles; and folks get bilked out of hundreds or thousands of dollars. They'll suck you in even more by suggestting, hey, keep an extra $50-$100 for your trouble, so it seems even more legit.
I hate criminals and scam artists, they should be.... Well, Tom knows what should happen to them
Ed