The most insidious scam I’ve experienced is one where they actual hack into an account of someone you actually DO know but perhaps have not heard from for a while.

Then they begin their pitch for some money making scheme, and of course, you are eventually requested to be in contact with someone who will ask for money, or passwords, or some such.

You have to be so careful these days.