Use a route you can verify
Do not sign in from an unexpected direct message, a short link, or a search ad you did not intend to open. Use a saved verified route or enter the known address carefully yourself. Check spelling all the way through the domain.
Keep passwords and codes to yourself
A password, one-time password, recovery code, UPI PIN, and card PIN are all private. Support agents should not need you to read those details in chat. If somebody pressures you to share a code quickly, stop and verify independently.
Use a unique password
Create a strong password that you do not reuse across email, banking, social media, or other apps. A password manager can make unique passwords easier to use without memorising them.
Be careful on shared devices
Do not save a password in a public or shared browser. Log out when finished, close the browser, and make sure you are not leaving an active session accessible to the next person.
Watch for payment scams
Never enter a UPI PIN to receive money, and never approve a payment request because someone says it is needed to unlock an account. Review payment details only inside the verified account or payment app.
Paid gaming can carry financial risk. Use only money you can afford to lose, do not chase losses, and check the rules that apply where you live.