Double check urls, extensions, read comments before downloading, url checker. Even before ChatGPT with a click of a button bad actors can replicate entire webpages with a click. Always have a second throwaway number and use passwords generators. Writing things down