It’s the old “add gas fees” scam, the token are there but there’s no gas to move them, so the victim adds some eth or whatever and the scammer immediately withdraws 😂

that scams requires the concept of embedded tokens, so potentially you could do something similar also with rgb/taro I guess