Nice tips.
But here is the one I see a lot. (Andrew, your tips are great but also please note)
My tip is DONT type your bank in the URL bar, but instead use your favorite button or google your bank on other computers, as many scammers have the similar or typo sites with pages that look exactly like the real thing. So on this identical looking site you enter your username and/or password without knowing it isn't the real site.
EX you want AbcBank which URL is AbcDirect.ca but you type AbcBank.ca forgetting the often forgotten Direct in its URL, but beleiving AbcBank must naturally have the rights to this URL, or you type AbcDirect.com instead .ca or AbDirect.ca forgetting a letter, etc
All or some of these erroneous are used by a scammer with IDENTICAL pages to the real site. (Google knows this and prevents scammers from being on their top list)