Trading app safety tips every new investor should follow

A new demat account is valuable, and that makes it a target for fraudsters. A few simple habits protect new investors from most risks. Sharing this checklist after an account opens is one of the most useful things you can do.

1. Download only official apps

Install the broker's app from the official app store or the broker's official website link. Avoid APK files shared on messaging apps. Fake apps can look identical and steal login details.

2. Use a strong, unique password

Don't reuse the same password as email or social media. Use a mix of letters, numbers and symbols, and don't share it with anyone, including family or referral partners.

3. Turn on two-factor authentication

Many brokers use a second factor like a TOTP app, PIN or biometrics. Enable the strongest option available. It makes it much harder for someone to log in even if they learn the password.

4. Never share OTPs

OTPs are confirmations of your actions. Genuine brokers, depositories and regulators never ask for them on calls or chats.

5. Check alerts regularly

Brokers send trade confirmations, and depositories send alerts when securities move. Read them. An unexpected alert is a sign to act immediately.

6. Lock your phone

Use a screen lock and app lock. If the phone is lost, a locked device keeps the trading app safe.

7. Beware of "support" calls

Fraudsters call pretending to be from the broker, asking to "update KYC" or "unblock the account" and requesting OTPs or remote access. Hang up and call the official support number yourself.

8. Don't install remote-access apps on request

Apps that let someone control your phone can be misused to move money or securities. Install them only if you initiated the support request through official channels, and preferably not at all.

9. Keep contact details updated

Your mobile number and email should always be current, so alerts reach you. Update them through the broker's official process.

10. Log out on shared devices

If you use a shared computer, log out after use and don't save passwords in the browser.

If something goes wrong

1. 1Change the password immediately.
2. 2Contact the broker's official support and report the issue.
3. 3Report cyber fraud through official government channels and helplines.
4. 4Keep screenshots of messages and alerts as evidence.

Why referral partners should teach this

A customer who loses money to fraud loses trust in investing, in the broker and in you. A customer who feels secure keeps using the account. Safety education is good for everyone.

Key points to remember

• Official apps, strong passwords and two-factor login are the basics.
• Never share OTPs or install remote-access apps on request.
• Read alerts and act quickly on anything unexpected.
• Verify any "support" call by calling official numbers yourself.
• Report fraud quickly through official channels.

Summary

Security habits take a few minutes to set up and protect investors for years. Share this checklist with every customer after their account opens. For more, explore our money safety and fraud awareness guides.

A five-minute setup after account opening

Right after activation, help the customer do these five things:

1. 1Set a strong password and save it securely.
2. 2Enable two-factor authentication.
3. 3Check that the registered mobile and email are correct.
4. 4Turn on app notifications for trades and alerts.
5. 5Save the broker's official support number in contacts.

This short setup gives a strong foundation of safety for years.

Teach by example

When you guide customers, never ask for their codes or passwords yourself. Your behaviour shows them what normal, safe practice looks like, and they will recognise a fraudster who behaves differently.