[pokergrader]

Direct IM just means the packets of data go from their computer to your computer, instead of from their computer to a server to your computer. They cant run arbitrary code on your computer unless you accept a file download and then run it.

And as long as you have a firewall running you should be safe even if you have a keylogger running. Just make sure no unknown program is allowed network access.