How to avoid ROM scams