The people being scammed here aren't looking at what they are doing, at all.

They go to the website, click "mint NFT", then their wallet pops up and says, "Sending [your expensive NFT] to [address], confirm?"

And then the user says, yeah, I want to send them my NFT.

There are more subtle ways to scam though. But the people losing them here are the type of users that confirm everything without reading.