Beware of scammers: never share your OTP