There are far too many things you should be careful with, but the main ones are not to submit your private data to unknown websites, not to use the same password for multiple logins, not to use public WiFi networks (without a VPN, at least) and finally, not to share more personal information than is absolutely necessary online.