Approval Phishing
A common scam is to ask you to sign an infinite token approval on a fake site. If you sign that, the attacker can drain your $USDC

USDCUSDT
Perp
1.00001
+0.03%
whenever they want in the future. Use tools like revoke.cash to regularly clean old permissions.