The scam is everywhere, on web 2 and web3 so it's just inevitable, that's why it's important to store their keys very well and offline preferably and then avoid clicking on any unverified links you find on the chain.