Good list. For point 2 (malicious links), here's one check that takes a minute. Before opening a "you won a prize" or "verify your account" link, copy just the domain name and look it up in any free WHOIS lookup. If it was registered a few days ago, close it. Real companies don't run giveaways from domains that are a week old.