Can you authenticate using any other SSH/SFTP client? If not, the problem must be on their end. If you can, please post logs both from WinSCP and the other client.
Before posting, please read how to report bug or request support effectively.
Bug reports without an attached log file are usually useless.