1. Never try to login/access your account from sites other than the main link. such as Facebook.com
2. Never click on any links from the sources you don’t trust while accessing your account.(or while accessing any other Google services like Gmail,Blogger etc.)
3. Delete any links on your scrapbook, no matter if a known or unknown person have sent it.
4. Never disclose your login details with anyone.
5. Never ever use Javascripts on a site, no matter whatever it claims to do.Get satisfied with the services provided by default! Avoid using third party Scripts which might be malicious.
6. Never get excited to see a site claiming to have [1000 cool orkut tricks] for which you have to just log in to your orkut account. Don’t trust that site. That’s a phishing site.
7. Never tick the box “REMEMBER ME” on the site homepage if you are surfing from a cafe or a public area.
8. Always remember to hit Sign Out button, when you are done.