Always check the URL starts with "https://" and look for the padlock icon in your browser. Never share your credentials with anyone.