To not click links willy nilly I guess? It's usually possible to see what the links' URL are if you copy the link itself, paste it into the URL bar but don't enter it yet. Just look it up and you'd see if it's the legit site of the exchange/project you're looking for. There might also be some sites that check the URLs validity for you but I don't really use them.

Also helps to double, triple check whatever the hell you're doing when you're using your login details for something. That's basically the only thing you can do to avoid Phishing. Always use software/extensions from the main website and avoid third-party ones like a plague. If they don't ask for your details then nice, you can use them. If they do, avoid them. If they're open source then you can probably trust them but if not, then just find an alternative or forget about it altogether.