Top News

Online scams are becoming more sophisticated every day. Fraudsters no longer rely only on fake phone calls—they also use WhatsApp messages, SMS, emails, QR codes, and fake customer support to steal money. Surprisingly, many victims lose money simply because they share a code they believe is harmless.

Here are eight codes and passwords you should never share with anyone, no matter who they claim to be.

1. OTP (One-Time Password)

An OTP is the most important security code for your bank account and online services.

Remember:

• Banks never ask for your OTP over a phone call.

• Customer care executives will never ask for it.

• Never share it with anyone, even if they claim to be from your bank.

2. UPI PIN

Your UPI PIN is used to authorize payments.

Important:

• You only enter your UPI PIN to send money.

• Receiving money never requires entering your UPI PIN.

• If someone asks you to enter your PIN to "receive" a payment, it's almost certainly a scam.

3. Debit or Credit Card CVV

The three-digit CVV on the back of your card is an important security feature.

Sharing your:

• Card number

• Expiry date

• CVV

• OTP

can allow scammers to attempt unauthorized online transactions.

4. Banking App Login Password

Never tell anyone the password you use to log in to your mobile banking app or internet banking account.

Even if someone claims they need to "verify your account," never reveal your credentials.

5. SIM Verification Codes

Scammers sometimes try to transfer your mobile number to a new SIM card.

Never share:

• SIM verification codes

• Carrier verification messages

• Activation PINs

Doing so could allow someone else to take control of your phone number.

6. QR Codes From Unknown Sources

Scanning a QR code isn't always dangerous, but fake QR codes can redirect you to fraudulent websites or payment requests.

Always verify the source before scanning any QR code.

7. Screen Sharing Permissions

Fraudsters often ask victims to install remote-access apps by pretending to offer technical support.

Never give screen-sharing or remote control access to someone you don't completely trust, especially during banking transactions.

8. Email or SMS Verification Links

Messages claiming your account will be blocked unless you click a link are often phishing attempts.

Before entering any login details:

• Check the sender carefully.

• Visit the official website or app directly instead of clicking the link.

Bonus Tip: Turn On Two-Factor Authentication (2FA)

Enable two-factor authentication wherever available, including:

• Email accounts

• Banking apps

• Social media

• Cloud storage

• Shopping apps

It adds an extra layer of protection even if your password is compromised.

The Bottom Line

Cybercriminals often rely on panic, urgency, and trust to trick people into sharing sensitive information. No legitimate bank, UPI service, or government agency will ask for your OTP, PIN, password, or security codes over a phone call or message. Staying alert and following basic digital safety habits can go a long way in protecting your money and personal information.