Keep on the safest wallet like have 2factor authentication or wallet have a sms verification because before to withdraw or to transfer the wallet they have confirmation from us. That was a safest wallet ever, Many of hacker targeted a not secured wallet like MEW. (Myetherwallet.com) Because that was only using a private key. But its up to the owner if the owner are careless so they can gave his/her private to the scammer.