2. There are many scammers now a days, be aware of them
3. On telegram there are many people trying to scam by impersonating admin of projects, be aware.
4. If any airdrop/bounty/giveaway is asking for money or private key to redeem your coin/token, exit immediately.
5. Do not keep your private key in your email or computer, write it on paper and keep it on safe place.
6. Keep yourself away from cheap pump/dump groups, admins of those groups are dumping on people by giving buy signals to people.
7. Always do your own research before you invest in any project. Do not invest in ponzi scheme who promise to give big ROI.
8. If you are new to crypto world then try to invest in top coins only to avoid scam projects.
9. If you do not have money but want to have crypto then you can join bounty/Airdrop. To get good bounties/airdrops easily you can join this group on telegram @cryptoearnfree
10. Never click any website link from your email.
11. Always double check website link when you login to exchange or private wallet and always try to fill it manually, do not google it.
12. To get official website links of exchanges or crypto projects you can get it from coinmarketcap.
For newbies, #1 specifically says that you should put it in either hardware wallet or desktop wallet. Just don't use online wallet, as it makes no difference as leaving your money inside an exchange where it is vulnerable to be robbed by hackers or any attackers that would attempt to make damages to the site as well as user's sanity.
If anyone is using MEW most of the time, don't forget to bookmark the original site. I already had an experience before in almost getting scammed and robbed by attempting to make me put my private key into their site so that I can claim their shit coin which is gonna stay shit for all these years to come.