Things you should never hand over
A few things protect your money and accounts, and no legitimate caller, message or website ever needs them from you.
Never share a one-time code / OTP, your password, your card PIN or CVV, or a crypto wallet seed phrase. Never let someone who contacted you remote-control your device, and never approve a login prompt you didn't start.
What to do: treat any request for these as proof you're being scammed. Hang up or close the page and verify independently. You can also call the police on 190 to report fraud.
Threat examples
This is account security. To confirm it's really you, read back the 6-digit code we just texted you. We can't fix your account until you do.
Listen: how it sounds
Training example — recreated voice, not a real call