The first phishing attempt I spotted in the Pixels ecosystem wasn't clever. It was a Discord DM telling me I'd won a land plot and needed to connect my wallet to claim it. I almost laughed. Almost. The problem is these get better. A few weeks later someone in a community server posted a link to what looked exactly like the official Pixels site. Same layout, same logo, one character off in the URL.
Here's what actually protects you. Bookmark the real site directly. Never connect your wallet from a link someone sent you. Treat every "you've been selected" message as a scam until proven otherwise. The Pixels game won't DM you. Nothing legitimate ever needs your seed phrase. That's the whole list.