Sort:  

The title of this post says "Never never....."
Never click on any link because you cannot differentiate the bad from good!

Hey @jaraumoses
Thanks for spreading the word about how to stay stafe and recover your account when you got in trouble anyway.
I hope your friend has been able to get his account and reputation score back?
You can see the difference between a phishing link in a comment and a normal link. (See my reply to @ryan12 below)

The phishing links redirect you to a website that looks like SteemIt, but has a different URL. I got tricked because I didn’t take a closer look at the URL, which said steemil[dot]com.
You also have the ones that have an ‘s cedilla’ instead of the first ‘s’.
In short, before tou enter your credentials, you always have to TRIPLE check the URL to make sure you are really on https://steemit.com or https://steemconnect.com.