GetErrorMessage (from CInternetException) gives me the following:
With the incorrect ftp server name: \"ERROR! The server name or address could not be resolved\
Yes that is intended. A typical FTP server will not distinguish between an invalid password and an invalid username. This is for security reasons, so e.g. attackers can't brute force their way to discover valid usernames.