KYC is the illicit activity.

The attackers knew the hardware wallet the man was using and the exact amount of his funds.

Don't use centralized exchanges.

Earn bitcoin or get it peer to peer.

Never share your seed phrase with anyone.

Always verify a caller by contacting the company directly before sending funds.