Be wary of ads that lead you to phishing websites. There are some advertisements that clone exchange websites. Be sure to bookmark the correct link, and don’t browse similar-looking websites.
Chrome extension applications such as Mwtamask can also avoid phishing websites.

Many beginners can't tell the difference between official and fake websites because they don't look at very similar website links, the metamask extension application doesn't update realtime to block phishing access, so you have to rely on your own abilities for personal security.