Turn on 2-Step Verification or add a passkey. Even if someone learns your password, they cannot sign in without your phone.
Never share a one-time code. Indo Mail, banks and government services never ask for it by email, chat or phone.
Check the sender’s full address, not just the name. A real Indo Mail message always comes from @indoemail.in.
Hover over a link before you open it, and type important addresses yourself.
Be careful with urgent requests for money, gift cards or UPI payments, even from people you know. Call them to confirm.
Use a different, long password for every account. Indo Passwords can create and remember them for you.
Review your devices in Settings and sign out of any you do not recognise.
Report suspicious mail with the Report button — it trains our filters for everyone.
Keep your phone and browser up to date.
If something feels wrong, stop and ask Lily or our Support Center. Asking is always safe.