How can I protect my demat account from fraud?

You never share your login credentials, OTP, PIN, or password with anyone, including someone claiming to be from the broker’s support team, since legitimate support never needs these to help you. You enable two-factor authentication wherever the broker offers it, and you use a strong, unique password rather than reusing one from another account. You regularly review your active login sessions and recent transaction history in the app, specifically watching for logins from unrecognised devices or trades you didn’t place. You make sure your registered mobile number and email are current and that you’re actually receiving trade confirmation alerts and contract notes, since a missed alert is often the first sign something’s wrong. You also verify any broker, adviser, or ‘tip provider’ contacting you unsolicited against SEBI’s registered intermediary list before engaging with them at all, since a large share of demat fraud starts with impersonation rather than a technical account breach.