I think this was a phishing issue because a user got scammed by a fake account in Telegram. This can happen anywhere on any ecosystem.

The best awareness here is to never respond to people that DM you first in Telegram and to get the official username (like mine) from someone in the community that you trust.

Telegram is filled with scams and almost zero protection.