The two-stage crypto scam: how not to fall for it