[qasdfdsaq]

I don't think you're paranoid but this is how a lot of legitimate business work as well. The whole reason they don't ask for your whole password is to prevent identity theft. That's specifically taught as good practice among security conscious companies such as banks.