Teach Computer Security and Basic Privacy

Email is not completely secure. Just know that others can access it
if they really wanted to.

Viruses and trojans can compromise your security.
The main avenue is email via attachments or personal looking phishing attempts.

Develop critical E-mail parsing skills

Never give up these via an email request:
Your social security number or tax identification number
Your credit card number, PIN number, or credit card security code (including "updates" to any of the above)
Your mother's maiden name

Do not respond requests to verify or confirm your any account information by clicking on a link from an e-mail.

Check the domain
good
amazon.com

Sometimes the link included in spoofed e-mails looks like a genuine Amazon.com address. You can check where it actually points to by hovering your mouse over the link--the actual Web site where it points to will be shown in the status bar at the bottom of your browser window or as a pop-up.

not good
security-amazon.com/...

or IP address (string of numbers)
http://123.456.789.123/amazon.com/. . . .

Do not "unsubscribe"

Never follow any instructions contained in a forged e-mail that claim to provide a method for "unsubscribing." Many spammers use these "unsubscribe" processes to create a list of valid, working e-mail addresses.

Electronic financial transactions can work.

See if they are here:
http://www.bbbonline.org/consumer/Relbrowse.asp
http://www.bbbonline.org/consumer/faq.asp

SSL can protect you.

from: http://www.askdavetaylor.com/how_does_ssl_work.html

SSL does two things: First, it encrypts the communication between client and server, so a hacker can't tap the line and wait for the you to type in a secret password. But how can the user know that the web site, which asks him to type in his secret password actually belongs to a legitimate business and isn't an imitation meant to seduce you to disclose his password?

That's where the other purpose of SSL comes into play. The certificate, which is installed on the server in order to enable SSL is supposed to be signed by a neutral 3rd party who vouches for your identity. The 3rd party, you need, is called a "Certificate Authority" or short "CA".