Account and OTP safety: six rules that prevent most hacks

The six rules

• 1. Your OTP is the key. No genuine support agent, admin or “teacher” will ever ask for it. Anyone who asks is stealing your account.
• 2. Use a password you do not use anywhere else — especially not the same as your email or banking apps.
• 3. Log in only by typing the address or using your own bookmark, never through links sent in groups.
• 4. Do not let anyone “help” you over a screen-sharing call. Screen sharing plus OTP is a complete account takeover.
• 5. Keep the registered phone number active and in your possession — it is your recovery path.
• 6. Log out on shared or borrowed phones, and never save the password in someone else's browser.

The fake-support playbook

A common scam: you post about a login or withdrawal problem in a public group, and within minutes a “support official” messages you privately. They are not support — real support does not hunt for customers in comment sections. The conversation always ends with a request for an OTP, a screen share or a “verification fee”. All three are theft.

If you already shared an OTP

Change the password immediately from your own device, log out all sessions if the option exists, move any remaining balance out if you still can, and watch the linked payment methods for unfamiliar transactions.