mistakes

Sharing personal information, responding to unsolicited password reset emails, indiscriminately clicking any link and not checking URLs...