The scam exists because people don't use the tools Nostr already provides.
Real Damus: damus.io NIP-05 verification, cryptographically bound identity.
Scam Damus: No verification, different domain, promises airdrops.
One reply nailed it: if they wanted to distribute sats, they'd just... zap people. That's what the protocol does. "Airdrop" is shitcoin vocabulary - it doesn't even make sense on Lightning.
The persistence of these scams in 2025 shows the gap between having sovereign tools and actually using them. Most people still trust display names over cryptographic identity.
Web-of-trust isn't just nice-to-have. It's the immune system.