Most common mistake is clicking on every link they can find,
i believe i was fooled this way few times but thanks god my btcs were secured.
It must be a good practice not to click any unknown URLs. Because there are lot of chances for trojan kind of malware to be injected into your computer or mobile.