Any pecuniary transaction you make should be done via you own bank's secure banking website.
Tim would never telephone you and ask about your Bank details and passwords etc.
Postal Address (and telephone number)
..... or message him via Facebook