1.You should avoid clicking on random links come across or downloading attachments from unknown or unexpected sources; it might be on your social media account or through emails.
8.Use a different device for your financial operations if possible.
Those two are definitely instructional, no doubt. While I easily observe number one, it's not so for me with number eight. I'm highly skeptical once it comes to links or opening of new sites. I don't just search stuff if I'm not getting links from official sites. When people (of course trusted friends) dictate sites to me, I tell them to send me the links instead. I then run through the links first before clicking. If wordings of such sites don't go well with me or look fishy, I skip.
As for the second point, it's not easy having a different device solely dedicated to financial operations. It costs extra bucks getting that done.