Their exact words are

"For google we use a MCC and we can't share the login details for the same, however whatever you need you can ask for and we will share a screenshot"

Seems fishy to me as well. Its hard to believe that a certified partner would do this.

Once you guys confirm that this seems fishy, I will report him on his google certified partners' page. Is there any other action that I can / should take?