Start from an address you recognise
Open a verified support channel independently. Avoid signing in from an unsolicited message or QR code. Compare the displayed name and address using the website address checklist.
Keep one-time codes private
Enter a one-time code only into the login flow you started. If someone asks for it by phone, chat or screen share, end the interaction and contact support using a verified route.
If an account already looks compromised
Keep the account alert, time and relevant screenshots for a report. If a payment account was involved, contact the bank or payment provider directly. India’s National Cyber Crime Reporting Portal provides an official reporting channel.