Its really up to you and how secure/complex you want it.
A secure setup would be something like:
ScamBait VM → [ Firewall (Block LAN access, allow internet via VPN) → VPN ]-----> SCAMMERS
This could be achieved via a single linux VM + iptables + free vpn.
Here is a quick example.
