Passphrase does nothing here. Once you enter your seedphrase and passphrase into a wallet. A scam wallet would have the ability to see that seed phrases and pass phrase and then can simply have custody to your wallet too, this is similar with having to clicking on a phishing site and signing in.
The only security that passphrase has is that when store at a different location from the seed phrases, if the seed phrase is compromised or stolen then the pass phrase will be another layer to stop the hacker from accessing your wallet, but in this situation both phrases are given to the scammer which stops nothing
That is why you should never enter your passphrase into a hot wallet, only a
coldhardware wallet.
You can leave a small amount of funds in the main wallet (or hot wallet) for
doing smaller transactions.
You
can also use
itthat as
the bait. If
thosethe funds in the main wallet are
ever swept then you know your
walletseedphrase has been compromised.
And it is time to move your funds (in
yourthe passphrase wallet) to a new wallet.