Secure your account
Use a unique password for every important account and enable two-step verification when the service supports it. Keep recovery details current and never reuse an email password inside a game app.
Never share secret codes
Support staff should not need your password, one-time password, UPI PIN, card PIN or device unlock code. Do not install remote-access software or share your screen because an unknown person asks you to.
Review permissions
A permission should make sense for the feature you are using. Be cautious if a game asks for accessibility control, SMS access, contacts, call logs, device administration or the ability to install other apps without a clear reason.
Check every payment
Read the recipient, amount and purpose before confirming. Never pay a fee to release a prize or withdrawal without independently verifying the service. Keep transaction references and use official support channels.
If something goes wrong
Disconnect the device from the internet if you suspect active misuse, remove unfamiliar apps, change important passwords from a trusted device and contact your bank or payment provider quickly for unauthorised transactions. Preserve screenshots and reference numbers.
Urgency and secrecy are common warning signs. Pause and verify independently.