Unsolicited DMs on financial offers shouldn't be treated with "skepticism". They should be seen as scam attempts waiting to happen with your permission. I believe no one can scam anyone without their permission. Both parties have to give consent before scam happens – the scammer and the victim. Hacks can happen without a victim's consent but not scam. That's the way I see that. In most cases, it's greed that gets people vulnerable to scam, not even ignorance. So, in my books, it's a red flag whenever I get unsolicited financial DMs. Newbies should take this as an advice they've to arm themselves with.