Also worth mentioning that "looking for information about scams/spyware" is exactly the wrong way to ensure your security. Practice better OpSec: Learn to tell the difference between legitimate and illegitimate communications, and don't respond (ever, for any reason) to unexpected or unknown senders. Don't plug random crap into your device. Manage your social media presence down to a bare minimum. Verify the veracity of software you download; use checksums if available. Don't do stupid things and the chances of being victimized falls to essentially zero.