The overwhelming majority of losses come from a handful of patterns: a fake site that captures your seed phrase, a token approval that grants unlimited spending, a support account that messages you first, and an airdrop that requires you to connect and sign.
Nobody legitimate will ever ask for your seed phrase. Nobody. Ever.