what people should do is to always check the link they are accessing, and if it's a new website that is offering an airdrop or something, they need to know the things they shouldn't share with them like the private key or connecting their wallets.
Thats right always checked the url of the site, many have been victim by phishing because all they know is they are on the right website but what they dont know is they are already a victim. Always check the url before logging in on your wallets.