Do not click on links or icons in unsolicited e-mails.
Do not reply to these e-mails. Delete them immediately.
Do not believe the content of unsolicited e-mails blindly. If you are worried about what is alleged, use your own contact details to contact the sender to confirm.
Type in the URL (uniform resource locator or domain names) for your bank in the internet browser if you need to access your bank’s webpage.
Check that you are on the real site before using any personal information.
If you think that you might have been compromised, contact your bank immediately.
Create complicated passwords that are not easy to decipher and change them often.
Vishing:
Banks will never ask you to confirm your confidential information over the phone.
If you receive a phone call requesting confidential or personal information, do not respond and end the call.
If you receive an OTP on your phone without having transacted yourself, it was likely prompted by a fraudster using your personal information. Do not provide the OTP telephonically to anybody. Contact your bank immediately to alert them to the possibility that your information may have been compromised.
If you lose mobile connectivity under circumstances where you are usually connected, check whether you may have been the victim of a SIM swop.