Most online fraud works by tricking people, not by breaking into computers. A few habits protect you from nearly all of it.
Use strong, different passwords
Use a long phrase you can remember, and never reuse it across sites. A password manager helps.
Spot phishing
Be careful with messages that create urgency, ask for an OTP, or link to a site that looks slightly wrong. Banks never ask for your OTP or PIN.
Check before you pay
Confirm the web address begins with https and matches the real site. For UPI, you never need to enter your PIN to receive money.
Keep software updated
Updates fix known weaknesses. Turn on automatic updates for your phone and computer.