I do not have enough experience, but I have read in a few sites to avoid :
phishing  emails(receive an unsolicited email  )
Avoid sites that are not trusted (do not contain https study the team of project
check the the White paper