Let's talk about private keys and addresses.
A digital signature can show that the person initiating a transaction holds the private key, and the signing process does not reveal the private key.
Honestly, I only learned this next point later: after pasting an address, double-check a few characters at the beginning, end, and middle—don't just check the first and last characters.
The coin mentioned in the article: $BTC , reported at 68789.28, down 6.49% over 24 hours.
If someone says you have to pay first to claim something, it's usually a scam.

Just my personal perspective; I may not be right, so please use your own judgment.