Most cyber safety advice sounds as if it was written for someone with spare time, three devices and a quiet office. Normal people need something different: habits that survive school runs, bad signal, work pressure, family emergencies and the moment a message arrives saying your account will be blocked if you do not act now.
Start with the sentence banks and security teams keep repeating for a reason: do not share your OTP. Not with a caller, not with a courier, not with a person claiming to reverse a payment, not with someone who says they are helping you secure the account. An OTP is a key, not a reference number.
WhatsApp deserves its own family meeting. Turn on two-step verification. Be suspicious when a contact suddenly asks for money, airtime or a code. If a family member sends an odd request, call them on a number you already know. A hijacked account borrows trust from a real relationship; that is why it works.
An OTP is a key, not a reference number.
For marketplace deals, slow the transaction down. Meet in safe public places where appropriate, avoid releasing goods on screenshots, check buyer and seller profiles, and do not click payment links sent under pressure. If someone creates urgency, moves the conversation strangely, or offers too much without inspecting the item, treat the drama as information.
Password managers sound fancy until you realise their main job is ordinary: remembering strong, different passwords so you do not reuse the same weak one everywhere. Add device updates, screen locks, banking app notifications and SIM-swap alerts where available, and you have already made yourself a less convenient target.
Cyber safety is not paranoia. It is household admin for a country where phones carry banking, family, work, school, photos and identity. The goal is not perfect security. It is enough friction that a scammer moves on before your week becomes a call-centre marathon.