Unironically, disable javascript. Nearly every scam arises from some javascript feature being abused.