I think there are two things that are most likely to be stolen by swindlers. One is to use phishing websites to swindle your private keys, account numbers, passwords, etc. The other is to pretend that ICO officials cheat you to participate in their “private placements”.