If the site asks you for your bank passwords it is not  a legitimate site because legitimate sites don't do this only ask for details.