I read elsewhere in this forum an offer to post these, so here goes.

This transfer request was processed over the phone.
the email received was addressed
OpenSRS Transfer <transfers@opensrs.org>

This request for transfer email did not specify the new registration service provider (by any name) for the domain.

" You have received this message because you are listed as the Registered Name Holder or Administrative contact for this domain name in the WHOIS database." ..... The name they listed on this email is not listed as the Registered Name Holder nor Administrative contact on Whois.

The actual Registered Name Holder nor Administrative contact was not mentioned in this email.

Is it standard for the support rep to ask for your domain account password ?

Many thanks for your input.

That sounds a little fishy to me. Can you post the whole email in it's entirety?