Xiaomei spent $20,000 on a Bored Ape NFT. Three days later, she clicked a phishing link in a DM and her wallet was drained. The hacker left a message: 'Thanks, the ape is handsome.' She never recovered the funds and changed her Twitter bio to 'I never click links.'