Classic crypto phishing: a fake wallet "update", a support account in your DMs, a sponsored search ad pointing to a copied site, or an "airdrop claim" page. Since the Keystone and Ledger data leaks, scammers also send physical letters to buyers.
Bookmark the sites you use, never share your seed phrase, and read what your wallet asks you to sign.