There is a lot of phishing that does on.
Let's say your bank name is Bank1s. You get an email from BankIs asking you to verify your account and they give you a link.
The email uses the Bank1s logo and it looks exactly like emails your used to seeing, so you click the link and try to log in with your bank id and pw.
And bam, you just gave the bad guy your log in info.
Also, add a prefix of suffix to any secret questions.
Example, your favourite pet is rover.
Question: what is the name of your favorite pet
Answer: rover123
Question: what is your mothers maiden name:
Answer:Smith123
Make sure your suffer or prefix is something only you know.