Mobile & OTP scams

Question 1 Report

Why should you read the entire OTP message instead of looking only at the numeric code?

The words surrounding an authentication code can tell you why the code was generated.

The message can explain what action or transaction the OTP is intended to authorize The numeric code is normally incomplete without the rest of the message Reading the full message makes the OTP valid for longer Reading the message automatically blocks scam calls

Question 2 Report

After installing an app recommended by an unknown caller, you notice unusual permissions and unexpected banking notifications. What should you do?

Treat the combination of an untrusted application and unexpected financial activity as a potential compromise.

Give the app additional permissions so it works correctly Continue using the app until money is actually stolen Secure affected accounts and take steps to isolate or remove the suspicious app Send screenshots of the banking notifications to the caller

Question 3 Report

A person claiming to be from your telecom provider asks you to read out an OTP to complete a mandatory SIM upgrade. What is the safest response?

Knowing your name or mobile number does not necessarily prove that a caller represents your telecom provider.

Share it because SIM upgrades require OTP verification Share it if the caller already knows your name Send the caller a screenshot of the OTP instead Refuse and verify the request directly with your telecom provider

Question 4 Report

An OTP message clearly says, 'Do not share this code with anyone.' A caller claiming to work for the same company asks you for the code. What should you do?

Pay attention to the security instruction included with the authentication code.

Follow the warning and refuse to share the OTP Share it because company employees are exempt from the warning Share it if the caller already knows your account number Share it after asking for the caller's employee ID

Question 5 Report

A caller says they are delivering a package you were not expecting and asks for an OTP that just arrived on your phone. What should you do?

An unexpected delivery combined with an unexpected authentication code deserves independent verification.

Ask a family member to provide the OTP instead Verify the supposed delivery and what the OTP authorizes before doing anything Provide only the last three digits Provide the OTP so the package is not returned

Question 6 Report

A stranger contacts you saying an OTP was accidentally sent to your mobile number and asks you to forward it. What should you do?

Consider why an authentication service would send a code specifically to your mobile number.

Do not share the OTP Share it after waiting a few minutes Forward it because the OTP belongs to them Share it if they can confirm your mobile number

Question 7 Report

An app downloaded from an unknown website asks for permission to read your SMS messages. Why can this be risky?

Think about what sensitive information is commonly delivered through SMS.

It permanently prevents incoming calls It could access OTPs and other sensitive messages It automatically changes your mobile number It automatically cancels your mobile plan

Question 8 Report

Someone claiming to be from a payment company asks you to enable Accessibility permissions for an app they told you to install. Why is this dangerous?

Some mobile permissions provide applications with broad capabilities to observe or interact with your device.

The permission can give the app powerful ability to observe or interact with the device The permission permanently disables the phone camera The permission automatically closes your bank account The permission automatically changes your SIM provider

Question 9 Report

You accidentally shared a banking OTP with a suspicious caller. What should you do next?

Once authentication information has been exposed, waiting for visible fraud can waste valuable time.

Immediately contact the bank and secure the affected account Wait to see whether any money disappears Delete the OTP message from your phone Call the suspicious caller and ask them to delete the OTP

Question 10 Report

A caller knows your full name, mobile number, and bank name and says this proves they are calling from your bank. Should you trust them?

Consider whether personal information can be obtained from sources other than your bank.

Yes, as long as the caller does not ask for your ATM PIN Yes, because only the bank could know those details No, those details do not prove the caller is genuinely from the bank Yes, if the caller also knows your city

Question 11 Report

Someone claiming to represent your mobile operator sends you a messaging-app link to install a 'SIM verification' application. What should you do?

A convincing company name or logo in a message does not establish that an application is genuine.

Install it on another person's phone first Install it because SIM verification requires special applications Install it if the application displays the telecom company's logo Avoid the link and verify the request directly with the mobile operator

Question 12 Report

Why can sending someone a screenshot of an OTP message be as dangerous as reading the OTP aloud?

Focus on what information is visible inside the screenshot rather than how it is transmitted.

Taking a screenshot permanently extends the OTP expiry time Screenshots automatically disable mobile security Screenshots automatically authorize transactions The screenshot can reveal the OTP and related authentication information

Question 13 Report

You receive an OTP while speaking with someone who pressures you to read it immediately before it expires. What is the strongest warning sign?

Think about how scammers use time pressure to reduce a victim's opportunity to verify a request.

The OTP arrived through SMS The caller is creating urgency while requesting confidential authentication information The OTP has an expiry time The caller is speaking quickly

Question 14 Report

Before entering an OTP that you legitimately requested, what should you verify?

An OTP is safer when you understand exactly which action caused it to be generated.

Whether another person received a similar OTP Whether the OTP contains repeated digits Whether your phone battery is sufficiently charged Whether it corresponds to the action or transaction you initiated

Question 15 Report

A caller claiming to be from your bank says a fraudulent transaction is pending and asks for the OTP you just received so they can cancel it. What should you do?

Consider whether an OTP could authorize an action instead of cancelling one.

Share only the first three digits of the OTP End the call and contact the bank through an official channel Ask the caller to contact you through WhatsApp instead Share the OTP because cancelling fraud is urgent