The scammers will try anything. Done the right thing there to check, the mother in law has dementia and before we had power of attorney would be giving away money to anybody who called or text her. Am sure most people know but worth repeating in this day and age:
If you didn't enter a competition, you haven't won anything.
If something seems off, it probably is.
If you weren't expecting the text/email, ignore it. If it's important they'll try to contact you again.
If an unexpected caller rings, let it go to voicemail. If you pickup they know the number is active.
If you use contactless payments, use additional protection (ooh er missus) like fingerprint required to authorise payment.
Get a RFID card and place it in your wallet or purse next to your bank card. I've seen chancers at festivals often trying their luck to scan cards.
Consider a Faraday pouch for your car keys if keyless.
If you don't have an online ad blocker, get into the habit of checking 'reject all's or 'do not consent' options on websites. They're asking you to agree to them selling your data to whoever they like. Some make it incredibly awkward, listing each company individually, rather than a reject all button.
If websites make you do this, drop kick them into touch and get your news elsewhere. Same with the newer trend of accept all or pay a fee to view. Looking at you MEN. You can certainly instruct Google on Android phones, and probably most internet browsers, to not even show you pages from specific websites. Use it, and eventually they'll have to change their practices or die once they see the click through rate declining.