It was a scam. I hope you didn’t pay them because there is a website “HaveIBeenPwned” where you type in an email and alerts you that it has been involved in a breach (I believe the passwords are anonymized though), so it’s a nice source for scammers to comb passwords from it.