Create a strong access layer
Use a unique password and protect the email or mobile number connected to recovery. Reusing a password across services can turn one data exposure into several account problems.
Where available, review active sessions and remove devices you no longer control. Do not postpone security changes because a game period is about to close.
- Use a unique password.
- Protect recovery contact details.
- Remove old sessions.
Recognise OTP and support scams
An OTP, PIN, recovery code or password is not a support conversation detail. A caller or message that creates urgency and asks for these items should be treated as suspicious.
Do not install remote-control or screen-sharing software to receive ordinary account help. End the conversation and return to a verified support route.
- Keep every authentication secret private.
- Reject remote-control requests.
- Use a verified support route.
Secure devices and networks
Keep Android or iOS updated, use a screen lock and avoid unknown apps with accessibility or overlay access. Check browser notifications and remove sites you do not recognise.
Avoid sensitive account actions on an untrusted public network. If a shared device must be used, do not save credentials and sign out completely.
- Keep devices updated.
- Review overlay and accessibility access.
- Use a trusted network.
Check payments and recovery
Confirm the amount and recipient before approving UPI or another payment method. Never approve a collect request merely because a message claims it is needed for verification.
After account recovery, change the password, remove unfamiliar sessions and review recent payment activity. Preserve transaction references without exposing full credentials.
- Verify every payment request.
- Review activity after recovery.
- Keep non-sensitive transaction evidence.
Frequently asked questions
Should an OTP ever be shared with support?
No. Keep OTP and recovery codes private and enter them only on the verified account screen.
What if remote-control software is requested?
Do not install it for routine account help. End the conversation and use a verified support route.
What should follow account recovery?
Change the password, remove unfamiliar sessions and review recent account and payment activity.
