1 Don't dab links in any messages
2 Don't use same password on more than one site or forum.
3. Don't just add an extra character to the password as a prefix or suffix, as a new password, it's not strong enough.
4. Do change passwords frequently. If a site gets done over and thousands of details leaked and sold on the dark web the misused, you won't see the site owner admitting incident until months later. Too late the to stop theft of personal information and access to any number of your browsings, including your bank account.
5. Do initiate your contact with a site then you can be more confident of it being the real thing, not a scammers fake site.
6. Don't let anyone rush or panic you – scammers want you to do things in a hurry and make mistakes like releasing personal details. However "urgent" the need, slow down and think about what you're being urged to do.
Lots of warnings similar to above issued by Which? Magazine, my bank, Martin Lewis and plenty of other sources. Remember, emails and forums are insecure so don't quote postal addresses, phone number or email addresses.
Take very great care.