To avoid falling victim to scams and social engineering attacks, here are some steps to follow:

1. Be suspicious if anyone contacts you asking you to give away personally identifiable information, such as passwords, security codes, bank account numbers, etc.
2. Always be skeptical of unsolicited communications: if it sounds too good to be true, it probably is.
3. Always verify the identity of the person on the other end of the communication and make sure you know who you're talking to.
4. Don't share sensitive information over email or SMS, use an encrypted messaging service or phone if possible.
5. If you are the target of a targeted attack, seek assistance from trusted professionals.