Many strategy comes up but never forget to not use public network, never switch device with other and always check address before doing activity. Phishing come from link on social media and telegram channel be careful with that, last one is never join program that you need to give private keys, that's dangerous. Be smart with your device and asset, change password 2 - 3 month and always up date information about method to keep our fund safe.