Nope, you can't get scammed by someone who just knows the login and pw, since you need more infos to change the pw, I guess.
Originally Posted by AznReincarnation he can REALLY mess up ur account but he cant take it over completely ^This. Also without the security question in his hand, he cannot take full control of your account.