PSA on social engineering, why the biggest crypto thefts often skip the device entirely and go straight for the person

A lot of the largest crypto losses did not involve a cracked wallet or a stolen seed. They involved someone being convinced to act, often by a person posing as support, security, or a helpful stranger. In one of the biggest cases on record, the attacker posed as wallet support and talked the victim into handing over their wallet backup. Hundreds of millions gone, zero code broken.
A few habits that hold for any wallet:
- Real support will not ask you to move funds, confirm a transaction, or share a recovery phrase to fix a problem.
- Slow down when a message creates urgency. That pressure is the attack.
- Verify through the official app yourself instead of any link someone sends you.
- Treat unsolicited help with suspicion, especially right after you post about a wallet issue anywhere public.
How do you all handle a support message you did not ask for?