These are only a few precautionary measures I can give you.
1. Do not give your wallet private key.
2. If they send you an email and ask to click a link, you better think twice.
3. If they are asking to provide your personal data, forget about the free token.