How to avoid phishing on ROM websites