Another important rule is to protect one-time passwords. An OTP is designed to verify access or authorize a particular action. Never send it to someone claiming to be a platform representative, payment agent, or account manager. Scammers may use urgent messages and attractive offers to persuade people to reveal their codes.