How to lose $163,800 in one mistake?

Here's what happened recently:
> a user successfully sent 10,000 $TON ($13K) and 9,000 $TON ($11.7K) to a trusted wallet;
> later, two micro-transactions of 0.0001 $TON each appeared in his wallet — classic dusting attack. Scammers "dusted" his transaction history to plant a fake address;
> the sender addresses of this "dust" looked almost identical to the real ones — matching first and last characters;
> when it was time to send the big bag — 126,000 $TON ($163,800) — the user simply copied a "familiar" address from his transaction history;
> but it was a fake, the funds went straight to the scammer.
Outcome: $163,800 gone…
Shortly after, the scammer sent the money back.
Well, most of it:
> he returned 116,000 TON ($150,800) and kept 10,000 $TON ($13,000) — probably as a "finder's fee" or just a reminder to stay cautious.
Along with the transaction, the hacker left a message:
> I'm sorry, but this is far too much. Please take it back — I know it's a serious amount of money. Peace.
Stay safe out there, fam.