If they already have your password (i.e. it has been compromised) there is no social engineering taking place.

In fact, they're doing the honorable thing and not simply trying the credentials to see if they work.