Never share OTPs, PINs or passwords. Verify payees, use official apps, enable alerts and report suspicious activity promptly through official bank channels.