Protect the keys to the account
Use a unique password and keep OTP, PIN and recovery codes private. Support should not ask for a banking password, full card PIN or device unlock code.
Store recovery information securely and review active sessions where the service provides that option. Change reused passwords from a trusted device.
- Unique password
- Private OTP
- Updated recovery contact
Recognise phishing pressure
Unexpected urgency, prize claims and requests to move to another chat are warning signs. Open the service independently instead of using a message link.
Do not install remote-control software or enable accessibility access for an unknown helper. They can expose screens and authorise actions.
Respond to a suspected incident
From a trusted device, change affected passwords, review transactions and contact the actual service or payment provider through a verified route.
Preserve screenshots and references while hiding secrets. Do not pay an unknown person who promises recovery or guaranteed reversal.