Most online fraud starts with loose phone settings. Every Android user should check these ten.
The essential 10
- Screen lock + biometrics — PIN/fingerprint beats patterns
- Google Play Protect on — Play Store → profile → Play Protect
- Block unknown-source installs — avoid APKs
- Audit SMS/call permissions — Settings → Privacy → Permission Manager
- 2-Step Verification — on both Google and WhatsApp
- WhatsApp privacy — photo/last seen limited to "My Contacts"
- Find My Device on — lock/wipe a lost phone
- Auto app updates — security patches arrive this way
- Never open SMS links claiming bank/prize issues
- Uninstall screen-sharing apps after use
If the phone is lost
Lock it via Find My Device, block the SIM, and request an IMEI block on the CEIR portal (ceir.gov.in).