Know your right as a crypto investor.
It is your right to safe guide your recovery seed, I repeat, it is your every right to safe guide your private keys only to yourself, it is your right to know that if you buy a ledger hardware wallet no one from ledger company should ask for your recovery seed or private key for any reason.
There is never any reason to start with, if anyone working in Ledger company ask you this do not fight it in your mind to accept that they are trying to scam you, like I've said it is your right to keep your recovery seed to yourself only.
A family member of mine, one of those who learnt about crypto very late still end up getting scammed, while some will call this foolishness I prefer to call it lack of knowledge. Ledger sent a message requesting for his recovery seed and he sent them, without thinking twice or informing me first, every coins he own since 2023 is gone, now he is starting from scratch after so many emotional tears been shared.
It is gone and not coming back, there is a lesson here if you are buying and holding coins, no one have the right to know a single alphabet of your recovery seed, not even the companies that made the wallets.
Aside from safeguarding the wallet seed phrase, or private keys, it is the right of every crypto enthusiast. Privacy is also our right, and we can claim to safeguard our wallet private information when we ignore privacy, which could protect us from being a target.
This incident occurred to your family member through the lack of privacy, which exposed his/her email or contact information.
After what happened to the person in the subject, I hope s/he also changes the contact information s/he is using because the email address is already on the radar of online thieves.
Every email address is unfortunately a target for online thieves, all you have to do is create a new email account and abandon it for a while, then go back, you would have receive many malicious messages in your inbox or spam box, the trick is these scammers form any email address they want and send their scams to it, someone somewhere have to use a email account that they guess, there are also some crazy softwares out there that find old and new email accounts, they work like magic.
What you know is better than what you don't know, i think it is better if the victim can tell the difference, i have many scam mails in my inbox but i don't check them out because i know that they are from scammers.