http://ssd.iykpqm7jiradoeezzkhj7c4b33g4hbgfwelht2evxxeicbpjy44c7ead.onion/ps/module/how-avoid-phishing-attacks
If the email or text was purportedly sent from your bank, don’t click on links. Instead, call your bank or open your browser and type in the URL of your bank's website. Likewise, if your Uncle Boris sends you an odd looking email attachment, send him a text message and ask if he sent you pictures of his kids before opening it.