I'm sure most people here know some of the key ways to protect yourself against this kind of scam, but just in case:

• Always be watchful when contacted by an organisation (bank, company, etc). You need to verify they're not a scammer, at least if you're giving out login credentials or anything else sensitive
• Check the source phone number/email address. Banks usually will not call/text from an international number, or cell phone. Emails will be sent from the appropriate domain (e.g. bnz.co.nz)
• Never log into something if you've clicked on a link in a text message/email, unless you are really sure it's safe. If in doubt, go directly to the bank (or whatever) website and log in rather than clicking on a link.
• Don't be rushed. It's better to wait on hold for 2 hours to contact the bank directly than to lose thousands.
• Turn on two-factor auth on anything important (banks especially)
• Remember scammers will try to make you feel like you're bring rude or difficult by asking them questions. That is part of the scam!

Other tips?