the weak link is always offchain comms. whenever someone reaches out claiming to be someone, check their onchain history and ethos score before touching a single link. https://ano.money/whois