Know who you are dealing with, every time.

Verify businesses and people, then exchange credentials and messages in a channel where both sides are proven.