Make sure you use different passwords for your different online accounts. You should also make your passwords long and complex and change them regularly. Remember to avoid using dictionary words, words spelled backwards, repeated characters, or personal information.
Don't respond to requests for personal information from unknown sources. Providing information such as your social security number or financial details may expose you to identity theft or other types of crime.
MESSAGES AND LINKS
Always use caution when clicking on a link or opening an attachment, even if it's been sent or posted by a friend or other reputable source. If you have any doubt, get confirmation directly from the sender. Be especially wary of messages that include attractive offers or urgent requests, and watch out for links that require you to immediately provide a login and password. If you're not sure whether the site you're on is real or phony, type the URL (for example, www.facebook.com) directly into your browser address bar.
Make sure you have the most up-to-date version of your web browser, and that it's equipped with anti-phishing protection. You can do this by checking the website for your browser company, or by going to the "Help" or "About" section in your browser program. Popular browsers include Firefox, Internet Explorer, and Safari.
Keep a clean machine. Make sure you've set your operating system to update automatically. You can do this from the "Settings" or "Preferences" menu. You should also have up-to-date comprehensive security software installed that includes anti-virus, anti-spyware, anti-phishing, and a firewall.
Facebook provides easy tools to help you keep track of your activity and logins, control the information you share, and prove your identity if you ever lose access to your account. Learn how to use these tools and similar ones on other sites so that you're always in control.
If you come across a scam, report it so that it can be taken down. Facebook and other sites provide report links next to most pieces of content, as well as ways to report spam messages and emails. You should also report scams to the relevant authorities in your country.