Common tactics include phishing, impersonation, fake exchanges, token approval scams, and address poisoning to steal funds.