Recently, some people are again interpreting on-chain large transfers and moving hot and cold wallets on exchanges as "smart money signals"… Honestly, if you can't even protect your own wallet, being clever is useless. Don't screenshot your seed phrase, don't upload it to cloud storage, and don't send it to "customer service." If you really want to copy it, use paper and store it offline securely.

Don't rush to sign authorizations either. When you see a "verify wallet / claim airdrop" redirect phishing site, your first reaction should be to close the page.
Last time, I saw an authorization popup in my browser where the spender was 0x9f3…cA12, and it was given unlimited access, with a domain name just one letter off from the official one—classic scam.
Anyway, I've now gotten into the habit: don’t connect your wallet to unfamiliar sites, don’t sign if you're unsure, and regularly revoke authorizations. It’s not cool at all, but it’s peace of mind.