What are some ways I can protect myself against fraudulent emails and websites?

Be cautious of any suspicious email address, e.g. incorrect grammar/spelling, misleading domain name
Open email attachments from unknown senders with extreme care especially those that have attachments with “pdf”, “word”, “Excel”, “exe”, “bat”, “.vbs”, “.js”, “.com” extensions
Do not click URL links from untrusted sources or emails such as spam emails. This will avoid your being re-directed to fraudulent websites which appear to be legitimate
Do not enter your email address and password when prompted from the hyperlinks/links in those unknown emails
Do not reply to any email messages from unknown senders as the unknown sender can validate the email address and owner