For the site it will ask you to register provide information like Name, email, phone numebrs and create a password and asks for your location. If for blockchain wallets its safe because it does not use an email address to login only the unique iddntifier. But if you are using coins wallet ir coinbase and use the same info (password and email address) he/she will first try to access any of the two wallets the two are just examples though because those are the 2 wallets use by some people I know who got robbed. Then once he is succesful on getting access to your wallet they will then send the money to the address shown on the image some only gotn$1 or less but they still transferred everything.
Then once its done they will reset the password to your email and like for some they used coins.ph the wallet gets deactivated. I think they normally target only wallets that uses an email/phone # to login. Probably xapo, coinbase, coins.ph to name a few.
Ih btw even if you join using other wallets its just a waste they already stop paying.