Some web-based "generators" ask for your login credentials to "deliver" the gold. This is a classic phishing attempt. They simply take your username and password, log into your account, and steal everything you have.