Scammers trick uneducated folks interested in Bitcoin by giving them the xpub.

The person being scammed think this is their wallet, and that the Bitcoin accumulation are actually their profits.

They keep giving the scammer bitcoin and watching the wallet grow, by all the people being scammed.

Only to learn the hard truth when they decide to withdraw. Which only happened when they have already sunk so much bitcoin in it.