Understand the basics
Keep recovery phrases and private keys offline. Do not store them in email, chat messages or screenshots. A service asking for your recovery phrase should not be trusted.
Verify before acting
Check the network, destination address and asset before sending. Test with a small amount first. On-chain transfers are generally irreversible, and tokens with the same name may exist on different networks.
Build a repeatable process
Use unique passwords, a password manager and two-factor authentication. Review token approvals regularly. With a hardware wallet, confirm transaction details on the device itself.