• Don’t open suspicious links or attachments
Especially emails like “Urgent payment”, “Invoice attached”, “Tax/Court notice”.

• Use strong passwords
Enable two-factor authentication for email, online banking and corporate services.

• Limit employee access
Give access only when necessary. When an employee leaves — revoke access immediately.

• Never share OTP codes
SMS/push codes and tokens must never be shared, even with “bank security staff”.

• Secure devices and update systems
Keep software updated, use antivirus, and block untrusted apps.