Lets say that my Act name is Sovereign, and my password is Sovereign. if i type "/w *insolence hey my name is sovereign", battle.net will not send the message to the person you selected to wisper, in this case a user by the name of insolence. Instead it will give you a message that your not allowed to send your password to anyone. SO no, `insolence`, it is not a new way of stealing accts, its a way of preventing more accts getting stolen by asshats who do that /dnd thing.