According to @phantom, many crypto scams are not code-based but social engineering, where scammers build trust and then induce victims to click links, share keys, or approve transactions that grant them access. Source: Phantom on X, Sep 24, 2025. This creates direct exposure during link interactions, private key handling, and on-chain approval steps, with potential for wallet access and loss of funds if manipulated. Source: Phantom on X, Sep 24, 2025.