Simple solution (and obvious), don't click on any links send to you unless you can trust the source (and if its a friend, its not a trusted source, they can been hacked).

Common sense goes a long way.