Use a unique password
Do not reuse a password from email, banking, social media, or another app with a similar name. A shared brand word does not prove that two products share secure account infrastructure. Use a strong, unique password and enable an additional verification factor when a trustworthy option is available.
Keep one-time codes to yourself
An authentication code is a key to the action shown in its message. Never read it to support, paste it into a chat, or enter it after an unsolicited caller directs you. The same rule applies to recovery codes, UPI PINs, passwords, and device-unlock codes.
Verify support independently
Navigate to support from a publisher-controlled website or the current app interface. Search advertisements, private groups, and direct messages can imitate support. Do not install remote-control software or share your screen to receive routine assistance.
Review recovery and closure before you need them
Check how the account can be recovered, which details can be changed, how marketing can be disabled, and how the account can be closed. If the process is unclear, ask through verified support before adding more data or payment methods.