Fraudsters often impersonate lenders and ask for advance fees, OTPs, or card details over calls and messages. A genuine lender never asks for your OTP.
Always verify that a lender is registered with the RBI and that their contact details match what appears on their official website.
Share documents only through official portals and encrypted channels. Be wary of links received via SMS or email that claim to be from your bank.
If something feels rushed or too good to be true, stop. Report suspicious activity to your bank and to the RBI's cyber fraud helpline immediately.