use the same password for multiple sites and devices
open suspicious links in emails, attachments, or posts
Imported from external platform