Today, when looking at those "coincidental transfers" on the blockchain, I usually don't jump to conclusions first.

First, break down the path: Is it the same batch of funds split across different addresses and then consolidated, is there an intermediate jump into mixing/bridging, do the gas patterns and time intervals look like they’re controlled by the same person.
Many seem like "someone is hinting," but actually it’s just routers + scripts moving money from A to B, with a quick detour through C.

But recently, phishing links have become ridiculously numerous, and hardware wallets are out of stock...
Honestly, the more of these situations there are, the easier it is for people to use such "coincidences" on the chain to set the rhythm.
Seeing too much of it gets a bit annoying: you think you're solving a case, but maybe someone is just testing everyone’s attention.
Anyway, I’d rather slow down now, check a few more times, sign more, and avoid anything with a history of incidents that didn’t pass, to prevent a heartbeat in the middle of the night.