@staff Tacking on this sentence was irresponsible and unnecessary:
"Real staff accounts either have a special role badge on their profile or are verified through the joinmastodon.org domain."
The potential victims of this scam don't understand how to verify those conditions and it just gives the scammers a way to trick them ("see here for the role badge we told you to look for when warning you about scams").
The responsible thing to say is "Real staff accounts will NEVER DM you asking you to click a link, disclose private information, or verify your account. Any such request is a scam."