As regards Web2 users constantly experiencing scams, I think users should as a matter of importance guard their accounts very well. Use strong passwords, avoid clicking on just any link and get 2FA verified.