[MagicalTux]

If he's really Spark or not is not important, never give your password to anyone. If someone asks you about the transaction ID of your paypal payment for Graal Online, make sure it's because you requested something (email change for example) and that the destination address ends with graalonline.com (better to double check).