He didn't hack your account. You filled out the username and password info on the page he sent you