Sort:  

I would also add documentation, and keep up to date with the latest methods to protect yourself. If there are new tools, you have to give them a chance and spend the time to learn how to handle them.

Yes that's about it. In the long run educating people about how these scams are done can go a long way to help prevent them from getting scammed.

The scam is everywhere, on web 2 and web3 so it's just inevitable, that's why it's important to store their keys very well and offline preferably and then avoid clicking on any unverified links you find on the chain.